0000000000000000000000000000000000000000000000000000007000d00000000000000000000000000000000000000000006000434c5553544552495000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000340200000000000000000000000000feffffff"], 0x1) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'veth0_virt_wifi\x00', &(0x7f0000000340)=@ethtool_dump={0x40, 0x4, 0x4, 0x6b, "290653efb56b6644e142c241e649e883ebeba1c3012412517ec557a92a755aee7924e57465c362eeb4e518fd3de817f66d92922da42f1e838770d8e330213dd2afdf25f69cc7ffa7fbf8e44002a284470144be4aebf051075832ed6fad900930aab61a96dacdd8df961aa0"}}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000580)="ca6154a1115ca8eb18b0b019eeb65e1f49581bb39ecfd65976357e8cb6dba824a30c9d0ce57dc1105a52559498dfdbaa5df07b985c1424c0e82b1a63221ca80a4781e9c649dc2cc0c706de24d697dbedf2f76ad339764c7e3de10a9117ec35032baa41a9ed5d2720e6e71c5c0096e31f62e5955c8b1e369efecd560f8468bbac0a9532b1365a6330608201686ff42ca874f4a545cc7a676399df", 0x9a, 0x20000804, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) io_setup(0x7, &(0x7f0000000240)) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000001300)={{0x1}, {0x0, 0x6}, 0x10001, 0x0, 0x7}) eventfd2(0x0, 0x80000) pipe(&(0x7f0000000200)) r7 = semget$private(0x0, 0x8, 0x0) semop(r7, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/validatetrans\x00', 0x1, 0x0) semop(r7, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) [ 316.319355] selinux_nlmsg_perm: 71 callbacks suppressed [ 316.319366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=11895 comm=syz-executor.4 [ 316.386670] audit: type=1400 audit(1581215437.415:121): avc: denied { sys_ptrace } for pid=11853 comm="ps" capability=19 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=cap_userns permissive=1 02:30:37 executing program 0: unshare(0x20000) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0xffffff0f00000000, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1) mount$fuse(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x240000, &(0x7f0000000280)=ANY=[@ANYBLOB='fd5', @ANYPTR=&(0x7f0000000100)=ANY=[@ANYRESHEX=r1], @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303036303030302c993565725f69643d", @ANYRESDEC=r0, @ANYBLOB="23250301000000307f19260399a22422ed578499a9cd59212a00e6748b1f138c3f8d62cd8c1d779c7d60948399715bca8a47f8e08590fa4cd8e2b92c35b3d696d14201c127a4db125559", @ANYRESHEX=r0, @ANYBLOB=',\x00']) setxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@random={'btrfs.', 'ppp0vmnet1+\x00'}, &(0x7f0000000200)='fuse\x00', 0x5, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) unlink(&(0x7f0000000080)='./file0\x00') r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f00000000c0)={0x9, 0x4, 0x2, 0xc, 0x81}) 02:30:37 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) pivot_root(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='./file1\x00') [ 316.464916] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=11895 comm=syz-executor.4 [ 316.507203] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 316.559612] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=11895 comm=syz-executor.4 [ 316.597336] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=11895 comm=syz-executor.4 02:30:37 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x100000000802, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)=0x0) ptrace$getregs(0xe, r2, 0x0, &(0x7f0000000100)=""/56) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="35d4a7cf18000000629841c900"}, 0x1c) sendmmsg$inet_sctp(r0, &(0x7f0000000100), 0xa0, 0x0) [ 316.628095] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 316.699168] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=11895 comm=syz-executor.4 02:30:37 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) getpid() r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@abs={0x1, 0x0, 0x4e21}, 0x80, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) syz_mount_image$cifs(&(0x7f0000000180)='cifs\x00', &(0x7f00000001c0)='./file0\x00', 0x9, 0x2, &(0x7f0000000500)=[{&(0x7f00000003c0)="3c36119356ca480ec4b8413161808b24a93a026dba4594a1d7de111174ac3597da75382dc1401e62c4900d25a63433ba7422230b0b6ef9926db937bce9844cc60567d181b1de0d947613e0a7609f10793b925d5950fffd4fbe4cd4e08f", 0x5d, 0x9}, {&(0x7f0000000440)="ce64d9d4f99363199edba06674d1b4c2ae403bd6a670b627ed364bd7627dd2dc1469be8862ac215a41434f44398a888590434146f291c4dd3646cabf44852ebae3159edcc30fb2100fe232087d1589ff6a147c761b4c1373ec540a8654ee97a2aa56b43a1905faa4ab7178570d5a7bae09151e26fe5e26667df754d2ec2ae80d3e43c133dd3e4ad97d905eece8b5333f971a99cc69", 0x95, 0x7fffffff}], 0x8000, &(0x7f0000000540)='/dev/null\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000100)='timerslack_ns\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x81420000a77, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x174, 0x2, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_NAT={0x2c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x8}, @CTA_EXPECT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, [], 0x36}}, {0x14, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @rand_addr="011dd8f247528f2b00be855095d2a4f1"}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_MASTER={0x38, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_MASK={0x38, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'snmp_trap\x00'}]}, 0x174}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) 02:30:37 executing program 0: openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0xffffff0f00000000, 0x40, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x1) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000080)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom$l2tp6(0xffffffffffffffff, &(0x7f0000000100)=""/186, 0xba, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x20) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x2000800a, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) recvfrom(r1, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x120, 0x0, 0x4f) [ 316.787364] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=11895 comm=syz-executor.4 02:30:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0xfffffffffffffe1e, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r6, @ANYBLOB="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"], 0x4c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', r6}) sendmsg$nl_route(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)=@ipv4_newaddr={0x60, 0x14, 0x800, 0x70bd25, 0x25dfdbfd, {0x2, 0x78, 0x124, 0x0, r7}, [@IFA_LABEL={0x14, 0x3, 'tunl0\x00'}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0xfffffff7, 0x0, 0x5}}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_ADDRESS={0x8, 0x1, @multicast2}, @IFA_FLAGS={0x8, 0x8, 0x88}, @IFA_LOCAL={0x8, 0x2, @remote}]}, 0x60}}, 0x4048000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) r11 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000f80)='/selinux/mls\x00', 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r11, 0xaf02, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r12, 0xffffff0f00000000, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1) accept4(r12, &(0x7f0000001000)=@hci, &(0x7f0000001080)=0x80, 0x80800) bind$isdn_base(0xffffffffffffffff, &(0x7f0000000fc0)={0x22, 0x5, 0x4, 0x1, 0x7}, 0x6) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r14 = gettid() process_vm_readv(r14, &(0x7f0000000d40)=[{&(0x7f0000000600)=""/38, 0x26}, {&(0x7f0000000640)=""/125, 0x7d}, {&(0x7f0000000840)=""/90, 0x5a}, {&(0x7f00000008c0)=""/33, 0x21}, {&(0x7f0000000900)=""/199, 0xc7}, {&(0x7f0000000a00)=""/160, 0xa0}, {&(0x7f0000000ac0)=""/220, 0xdc}, {&(0x7f0000000bc0)=""/254, 0xfe}, {&(0x7f0000000cc0)=""/109, 0x6d}], 0x9, &(0x7f0000000f00)=[{&(0x7f0000000e00)=""/142, 0x8e}, {&(0x7f0000000ec0)=""/63, 0x3f}], 0x2, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r13, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d6652037756d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e34d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe439c6479605528726a068cdc76a22067b3534442da88bc90000000000000000000000000f6a0d707"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000000040000000000000000", @ANYRES32=r8, @ANYBLOB="000000000400000008000a00", @ANYRES32=r13, @ANYBLOB], 0x28}}, 0x0) r15 = syz_open_procfs(0x0, &(0x7f0000000100)='timerslack_ns\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) splice(r16, 0x0, r15, 0x0, 0x81420000a77, 0x0) ioctl$VIDIOC_S_OUTPUT(r16, 0xc004562f, &(0x7f0000000f40)=0x90) sendmsg$can_raw(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0x10, &(0x7f0000000580)={&(0x7f0000000540)=@can={{0x2, 0x1}, 0x4, 0x3, 0x0, 0x0, "c20693dee14e1788"}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0xc01) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r13, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) [ 316.852600] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 316.861222] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=11895 comm=syz-executor.4 [ 316.862241] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=11895 comm=syz-executor.4 [ 316.980197] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=11895 comm=syz-executor.4 [ 316.994346] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.4'. [ 317.017048] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=11918 comm=syz-executor.4 [ 317.021516] batman_adv: Cannot find parent device [ 317.055143] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 317.173268] device bridge2 entered promiscuous mode [ 317.197782] device bridge_slave_0 left promiscuous mode [ 317.204765] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.262052] bridge2: port 1(bridge_slave_0) entered blocking state [ 317.278910] bridge2: port 1(bridge_slave_0) entered disabled state [ 317.301540] device bridge_slave_0 entered promiscuous mode [ 317.344305] bridge2: port 1(bridge_slave_0) entered blocking state [ 317.350881] bridge2: port 1(bridge_slave_0) entered forwarding state [ 317.517356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.530380] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.548426] device bridge_slave_1 left promiscuous mode [ 317.562181] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.628064] device bridge_slave_0 left promiscuous mode [ 317.636603] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 317.646769] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.708741] device veth1_macvtap left promiscuous mode [ 317.717806] device veth0_macvtap left promiscuous mode [ 317.744509] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 317.762867] device veth1_vlan left promiscuous mode [ 317.774835] device veth0_vlan left promiscuous mode [ 318.102731] device hsr_slave_1 left promiscuous mode [ 318.164750] device hsr_slave_0 left promiscuous mode [ 318.229323] team0 (unregistering): Port device team_slave_1 removed [ 318.253282] team0 (unregistering): Port device team_slave_0 removed [ 318.272868] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 318.333970] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 318.449164] bond0 (unregistering): Released all slaves [ 318.536938] batman_adv: Cannot find parent device [ 318.555839] device bridge_slave_0 left promiscuous mode [ 318.561524] bridge2: port 1(bridge_slave_0) entered disabled state [ 320.541571] IPVS: ftp: loaded support on port[0] = 21 [ 321.341926] IPVS: ftp: loaded support on port[0] = 21 [ 321.356028] chnl_net:caif_netlink_parms(): no params data found [ 321.438072] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.445141] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.452354] device bridge_slave_0 entered promiscuous mode [ 321.459542] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.466071] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.473539] device bridge_slave_1 entered promiscuous mode [ 321.507963] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 321.518459] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 321.573943] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 321.582339] team0: Port device team_slave_0 added [ 321.602472] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 321.609632] team0: Port device team_slave_1 added [ 321.627136] chnl_net:caif_netlink_parms(): no params data found [ 321.656175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.662517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.687889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.707423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.713855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.740168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.756899] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 321.769468] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 321.834486] device hsr_slave_0 entered promiscuous mode [ 321.880562] device hsr_slave_1 entered promiscuous mode [ 321.936413] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 321.944081] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 321.969907] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.976916] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.984179] device bridge_slave_0 entered promiscuous mode [ 321.992063] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.998427] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.005654] device bridge_slave_1 entered promiscuous mode [ 322.037728] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 322.053383] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 322.084535] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 322.091707] team0: Port device team_slave_0 added [ 322.101208] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 322.108324] team0: Port device team_slave_1 added [ 322.138808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.148391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.173710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.196879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.203200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.228566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.243364] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 322.255871] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 322.302501] device hsr_slave_0 entered promiscuous mode [ 322.340410] device hsr_slave_1 entered promiscuous mode [ 322.381010] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 322.389961] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 322.415147] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 322.435862] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.442720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.450751] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.457435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.466369] device bridge_slave_1 left promiscuous mode [ 322.472114] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.510951] device bridge_slave_0 left promiscuous mode [ 322.516446] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.573672] device veth1_macvtap left promiscuous mode [ 322.579087] device veth0_macvtap left promiscuous mode [ 322.584629] device veth1_vlan left promiscuous mode [ 322.589714] device veth0_vlan left promiscuous mode [ 322.712066] device hsr_slave_1 left promiscuous mode [ 322.754422] device hsr_slave_0 left promiscuous mode [ 322.798239] team0 (unregistering): Port device team_slave_1 removed [ 322.809938] team0 (unregistering): Port device team_slave_0 removed [ 322.819373] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 322.874910] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 322.953092] bond0 (unregistering): Released all slaves [ 323.075955] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 323.104747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.114774] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 323.126182] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 323.135981] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 323.142583] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.153996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 323.161060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 323.170502] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 323.181881] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 323.189298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 323.199639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 323.207338] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.213736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.221676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 323.229420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 323.237221] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.243849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.251245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 323.262748] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 323.271782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 323.286208] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 323.294025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 323.354944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.367644] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 323.384377] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 323.391842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 323.399694] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 323.408013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 323.416105] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 323.425277] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 323.435457] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 323.445434] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 323.456476] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 323.472587] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 323.478772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 323.487313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 323.501150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 323.508811] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 323.525409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 323.533697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 323.547886] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 323.555246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 323.568866] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 323.577244] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.596806] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 323.614048] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 323.628682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 323.637440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 323.651076] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.657455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.673148] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 323.691278] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 323.706341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 323.714360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 323.727356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 323.734363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 323.748559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 323.757330] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.763757] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.781679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.789505] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 323.803450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 323.818844] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 323.830246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 323.855987] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 323.876445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 323.891095] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 323.902826] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 323.918686] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 323.926435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 323.943667] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 323.960353] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 323.968471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 323.976988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 323.988304] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 324.003727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 324.013501] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 324.023738] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 324.033402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 324.064036] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 324.081325] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 324.087643] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 324.100266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 324.118997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.177804] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 324.198725] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 324.218829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 324.234181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 324.306509] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 324.321837] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 324.328727] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 324.346393] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 324.354014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 324.361829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 324.369345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 324.376474] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 324.385630] device veth0_vlan entered promiscuous mode [ 324.402552] device veth1_vlan entered promiscuous mode [ 324.411458] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 324.421951] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 324.437630] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 324.458169] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 324.469406] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 324.481366] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 324.491809] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 324.502903] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 324.511463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 324.519444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 324.527896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 324.536035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 324.546064] device veth0_macvtap entered promiscuous mode [ 324.553358] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 324.564569] device veth1_macvtap entered promiscuous mode [ 324.581243] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 324.598080] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 324.617157] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 324.636912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 324.646993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.657093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 324.667125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.676630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 324.686416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.695622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 324.705591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.715974] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 324.723814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.732875] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 324.740713] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 324.748037] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 324.755923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 324.766032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 324.778926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.788237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 324.800362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.809501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 324.819374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.828831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 324.838857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.849081] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 324.856148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.865613] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 324.873753] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 324.880704] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 324.887397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 324.898388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 324.925341] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 324.939843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 324.947654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 324.956573] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 324.964144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 324.978071] device veth0_vlan entered promiscuous mode [ 325.038448] device veth1_vlan entered promiscuous mode [ 325.046402] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 325.058783] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 325.077785] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 325.088234] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 325.095584] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 325.103940] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 325.113223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 325.121427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 325.131542] device veth0_macvtap entered promiscuous mode [ 325.137898] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 325.147937] device veth1_macvtap entered promiscuous mode [ 325.154600] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 325.175173] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 325.186984] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 325.198512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 325.208730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.218053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 325.227931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.237101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 325.247008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.256317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 325.266181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.275746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 325.285523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.296605] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 325.304855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.315909] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 325.323424] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 325.331158] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 325.338860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 325.351557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 325.361455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.371501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 325.381343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.390491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 325.400257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.409372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 325.419176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.428366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 325.439329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.449766] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 325.457666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.466593] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 325.475201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 02:30:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x7}, 0x1, 0x8101, 0x80, 0x1, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/ipv6_route\x00') sched_setscheduler(0x0, 0x5, &(0x7f0000000000)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x20}) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x100, @remote, 'geneve0\x00'}}, 0x1e) sendmmsg(0xffffffffffffffff, &(0x7f000000d180), 0x4000000000000eb, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) socket$netlink(0x10, 0x3, 0xc) syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x0) syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c0002800800020000000000"], 0x3c}}, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8}]}}}]}, 0x3c}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$P9_RWRITE(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) 02:30:46 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x100000000802, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac623ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a92825a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x104eb, 0x8, 0x0, 0xffffffffffffff1a) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000000c0), 0x8) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="35d4a7cf18000000629841c900"}, 0x1c) sendmmsg$inet_sctp(r0, &(0x7f0000000100), 0xa0, 0x0) 02:30:46 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40, 0x0) sendto$llc(r0, &(0x7f0000000240)="5eeafb2c75d82f637e2864298457bf6fbd3a5b4e14906bf1186bfb7a1df619591320ea74e52a243bb7c31357eb2878f510fed19c57ba74dd497659a8d0a62dcce1198a9b8c538d80d277ebe3bdf02a0727306c75c89b2b8d635434a5d6e3c3cd9dcb59da6c5a639fd10c0206340c4e53aa19341e6f88b1b0633e4c7e31c147311bc5f4a8c8555e57aa55f91094bdd185a6fefc34d98ca59df68dd14b26a16c88e093ae44826338", 0xa7, 0x4000000, &(0x7f0000000040)={0x1a, 0x334, 0x4, 0xff, 0x6, 0x5, @broadcast}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) fstat(0xffffffffffffffff, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x440000, 0x0) recvfrom$l2tp(r2, &(0x7f0000000300)=""/66, 0x42, 0x80000140, &(0x7f0000000380), 0x10) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r3, &(0x7f000000d180), 0x4000000000000eb, 0x0) 02:30:46 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='timerslack_ns\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x81420000a77, 0x0) r6 = socket$inet(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) getsockopt$inet_dccp_int(r5, 0x21, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0x4) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r10 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r10, 0x110, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x14, &(0x7f000059aff8)={r11}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000380)={r11, 0x2, 0x54, 0x7fffffff}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000180)={r11, 0xea, "206a0ae644c0f8de579caccdb962a3308fdd18468afdd642ffd0cf47b2263cee111490489d31bfaaccdc8ce8effb2e01760a66ded12295faaebeab70824c9cd5bc8d9677987bdb9ae75ec598b489a2a8e09a19f7ed0a74fdcba15bc1ba48b276b2a96c9e356898f2eda5bde80706d03f3df3e53a2de2f2472738fc5d8b5527d31c09193b2df14f618c3742921218423701b5f28dc202319c7cbfb6125b78ed86fcbb8fd384cd73cd81b4ec5c03bc772f573d3b3e8f885b33c1003c55a8dac176b0283a9c299b1f341d61cd06132adddf6229abafd9833ff45dd3ac80542c21ebd0407ce732251cf059aa"}, &(0x7f0000000000)=0xf2) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000100)={r12, 0x74f}, &(0x7f0000000280)=0x8) write$tun(r0, &(0x7f0000000040)={@void, @val={0x0, 0x1, 0x0, 0x4}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}, 0x32) 02:30:46 executing program 5: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x8) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x3f}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000440)=ANY=[@ANYBLOB="8100000000000000000000000013f070d022622fd25d66b1f4e4e1dce7cdb807f8c8a07940bd43bfd298ad20faee3cc14225d4eab625849b6a71da30e86779d2467e6709082e"]) sendmmsg$inet(r4, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001940)="a5", 0xc01}], 0x1, 0x0, 0x0, 0x1cb}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)="db54f09697a24c9b5b2a5d6cae53b0be972b8c9fc35d9860fa0da502329530054ac02c3165ad1b7b52d7a7f481be511b488ba572e2e5b054d8", 0x220908}], 0x1}}], 0x3e02eaaea8f3bdb, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000340)=""/237, &(0x7f00000000c0)=0xed) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_stats\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 325.584799] selinux_nlmsg_perm: 20 callbacks suppressed [ 325.584809] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pig=12020 comm=syz-executor.1 [ 325.646155] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pig=12027 comm=syz-executor.1 02:30:46 executing program 5: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "75b782e4ad88b89d1fc31916080000000788ccfc7f660510420aaa96759ecbc36eb9bb12b6124793608dd0e7316d1d4f4dbac39877e4ac714b7ecefa8a934a", 0x1}, 0x60) sendmsg$nfc_llcp(r1, &(0x7f0000000500)={&(0x7f0000000040)={0x27, 0x0, 0x1, 0x4, 0x6c, 0x8, "501fcecee7a26e4f420b3c287535d1ecf527b8f96318243c867aae3bb491b62838fdd9431a71e5d7b0fd67f52a582a8bf8a744e8589445daed82ea7a5be0ff", 0x2e}, 0x60, &(0x7f0000000140)=[{&(0x7f0000000240)="dd79e7d6b316ef02eca1ebb4cb4af9a554ce4f559c2fc9761b4fa73745ed00d4a50bf18be45c18841c12d6558f1a3380a714debe17c81f0c91ebf2a64364737f6a014e989b643b00e3184abfa65a83d97485357a870e480e42743aa607d0f6f45c8a6dcdd70379c7ba5be5c875a7a0e67b1856bbe98ef81838fc77b29d3bf78115f4e0424511f9a3dc3d1507fd0222e13d1eec219924446c28c696651466c2d7d99c4642ffd6a781d345a5739bb7e0324ea6354c9b5cdbacc01ad7a133f3d2db2023af2d24a4f27da7e3e2dce08a79d2b517e3412443ae35c033336df329d93a1da7dd6cbd3fd4", 0xe7}, {&(0x7f0000000100)="84aa8e", 0x3}, {&(0x7f0000000340)="1f13e32d0b31fb43de66073a3b49482211ef9fc443f0c8e2ccf607c10fc0b24d9d3b56f94237a90d41df9395469893f6241babd12570cff78feb7acccb4a94ffad8f183204f92eaca4e48f52f30485ed1b8145c48e065bcc970b02a10dff01e1c5bb40400b9905c905cf96a706dd20c04e9c6eed8560203c167a981cc647", 0x7e}, {&(0x7f00000003c0)="0ca9361d358010558048ec896ebb79da2f8285c47052305602d05243c4e9bf6f21d3721b5f6a359d539642dd650d7feb220f2d054000637bc2b00943a218d7f9f2c069acc314e64d0802e0990e5a35e0aefca2a407a6ed48de3e87ba95dd42e1691efd0965c9e747b24e3038b372320faac0a47d840317263cc4920575eb74ad49175c4e07c30a5bfeeb0496abaafbd60c67d7", 0x93}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="600000000000000018010000080000003a1bbcf0e311beaf843b464acc4be828836f284b21fb310d26651b1a10f5d34788db44e3cefeb4ea6875c22aca3240be57d71a10d948e28741e9be7cd5de7fe0ce1b484ec4dbdf4c0108dcd1ffb4cb540000000000638db8ed9a4ee37ce41b49a913b7b64453c0bedb6fd656db4d4de7123c9d613f8104213b4d4ef14059f0ce4233d077873af5d54d3669e6309c1fdee9bf90dbc2b216f337c2ac640f0308a6245dba4b335a95b051fbcc59f9c84dc510f9a20b580234f98df3f9f1cad113b7fd4f6ee948e194d58e660000000000"], 0x60, 0x200008c0}, 0x90) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) sendfile(r2, r2, &(0x7f00000000c0), 0x8080fffffffe) 02:30:46 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x2) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000001a40)=[{{&(0x7f0000000440)=@rc, 0x80, 0x0, 0x0, &(0x7f0000001e40)=""/239, 0xef}}, {{&(0x7f0000003300)=@tipc=@id, 0x80, &(0x7f00000049c0)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f0000001f40)=""/258, 0x102}, 0xfffffffe}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c80)=""/157, 0x9d}}], 0x3, 0x2, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000380)=0x2) r2 = open(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000540)) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) read(r4, &(0x7f0000001780)=""/172, 0xac) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./bus\x00', 0x0, 0x51) ioctl$TUNSETCARRIER(r5, 0x400454e2, &(0x7f0000000500)) r6 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r6, 0x2081ff) read(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='timerslack_ns\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) splice(r8, 0x0, r7, 0x0, 0x81420000a77, 0x0) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTDEF(r7, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x30, r9, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x9, 0x1, '-GPL\x00'}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x4840) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001bc0)={0x0, @rand_addr, @local}, 0x0) recvfrom$packet(r6, &(0x7f00000016c0)=""/133, 0x85, 0x40000022, &(0x7f0000001c40)={0x11, 0xf5, r10, 0x1, 0x4, 0x6, @local}, 0x14) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1b0}, &(0x7f0000000200)={0x0, r11+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 325.817878] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 325.839815] FAT-fs (loop5): Filesystem has been set read-only [ 325.875924] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000020) 02:30:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0xffffff0f00000000, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="7261777401648f00000000000200000000000000000000000000000000000000020000000300000018030000b0010000b001000000000000b0010000b00100008002000080020000800200008002000080020000030000000000000000000000ffffffffac1e000100000000000000006970366772657461703000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009001b0010000000000000000000000000000000000000000f800726563656e740000000000000000000000000000000000000000000000000000000000000000020073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000290000000000000000009f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055643001be8cecb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000008000000000000000000020004e4f545241434b000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bc0000000000000000000000000000000000000000000000007000d00000000000000000000000000000000000000000006000434c5553544552495000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000340200000000000000000000000000feffffff"], 0x1) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000300)={0x7, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e22, @remote}}}, 0x108) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000041000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000280)="66ba4000ec3e43cf640fc72f36262e3e660f3adf8803800000c641d229b8010000000f01c1f30fc7b70e000000c423414c31df450fc77907b9da0b0000b800000000ba000000000f30", 0x49}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xfd, 0x7, 0xff, 0x6, 0x0, 0x3, 0x46038, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={&(0x7f0000000080), 0x8}, 0x90, 0x3, 0x0, 0x3, 0x0, 0x10003}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0xb) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000002f000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 02:30:47 executing program 4: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() mq_notify(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600)='wireguard\x00') bind(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x0) tkill(r0, 0x9) syz_emit_ethernet(0x52, &(0x7f0000000000)=ANY=[@ANYBLOB="fffffffffffeaaaaaaaaaaaa86dd60a4fe8000000004000000000000000000aa810090780001fffe3755eda30000000000db5ffa14355868cd4f16bcec5f7b91eab4c6d76e34c6d9d8048b3c81c3bebc48c0eb6f85780408c4b9c40000000000000000000600000000000000"], 0x0) [ 326.062062] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 326.103797] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 326.760932] audit: type=1804 audit(1581215447.795:122): pid=12047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.1" name="/root/syzkaller-testdir058657422/syzkaller.DZW8AV/2/bus" dev="sda1" ino=17006 res=1 02:30:48 executing program 5: keyctl$update(0x2, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0x0) add_key(0x0, &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r4 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x15bb, 0x804000) r5 = socket$inet(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r6 = socket$inet(0x2, 0x4000000805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = dup3(r6, r7, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000340), 0x0) sendto$inet(r8, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f00000003c0)=ANY=[@ANYBLOB="0204070000000000008b20bd192af48c1a153d9fcfc5b0608955a2893feb2a80e74bb1aebe2d8c0aa9b7c9094456d3e81209af5638e2fdbcb76fd1271bbe22e2abc7de1f9a91180fc6bcae931dd99a22795306b35cdae636c0b31c358fc3fb2ac0c5217c3043d3116b511e5156fe0c8e61072a143d726ace784b8c8686a50d2e435140f734", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x14, &(0x7f000059aff8)={r9}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000380)={r9, 0x2, 0x54, 0x7fffffff}, 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140)={r9, 0x10001}, 0x8) syz_open_procfs(0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffd000/0x1000)=nil) r10 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r10, 0x4, 0x6100) write$cgroup_type(r10, &(0x7f0000000200)='threaded\x00', 0x175d900f) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000100), 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0xfffffffffffffffe, 0x0) 02:30:48 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x40, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000640)="23b98d"}) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r1 = dup(r0) write$P9_RXATTRCREATE(r1, &(0x7f00000006c0)={0x7, 0x21, 0x2}, 0x7) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000100)='\xf4y6\xce\xaa#\x9d\xc6\xa6\x03\"H\xbaa\xbf\xae\x05\xe8\xd9\xadwJ\xf7m\xeb\x8b\x1c\xea\xa57\xb2u\x90\xd8\xd1\xc1\xf4\x12\f\x86\x9b\xa9\xd5\xfd\xff,\xb8\xcf\xba\x12\xd7\xc2\x1d\xb4\x85>YN\x19\xe2\xabM\xad\xe4\x14\x0f\xc5\xa4}\xfcdV\'X\xf3\xc5p\xee\xf9+\x1e\x96%8\xe7\xf49\x89\xff\xdb\x03[p\x8a\x87Q\xde,\x11\x90\xb1\xb3\xce\xbb\xdca\xc2\xca\x06\x00\x00\x00\xd3\xf9\xb09\xba&\x96\x18\xb1i\xdf\xa2\xc4\x05\xdc*I\xdb\xb5\x8c\xf1\xd8{\xed\xc1\xa2Qm\xa0+\x06\x9f\xa5;V\x96:\x02\xedN\x89\x97\xb8\x90}N\xc5\x8fu\x1d\x7fW\n\xe44', 0xfffffffffffffffd) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000200)={0x5, 0x7, 0x4, 0x2, 0x20, {0x77359400}, {0x2, 0xc, 0x0, 0x6, 0x6, 0x40, "723431b8"}, 0x6f8, 0x3, @userptr=0x1, 0x74f, 0x0, 0xffffffffffffffff}) sendmmsg$nfc_llcp(r3, &(0x7f0000006000)=[{&(0x7f0000000280)={0x27, 0x0, 0x0, 0x3, 0x1f, 0x4, "2bec83b8c531b477fee274ce4ab3c5180e12925c9e3f6fd56643eecd6b75a36c291905e71c08a904ea17cd2053643a5167faa96d37c2ffb7b25af2223a7124", 0x7}, 0x60, &(0x7f0000002840)=[{&(0x7f00000007c0)="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", 0x1000}, {&(0x7f0000000300)="28a0486d93dda4937d27bf17e4f4b375a8e12396a4710760b826511ec8d491b9d1211eaa119dfae35a37cc7f9efc45eccd3997ab70ef0ebf9ea23a900245f5964f0d1a4776df86b1528e9d", 0x4b}, {&(0x7f0000000380)="2b56f4b488c7fa329544e99ef3d01c786eda0c42efc8fba9bf1b86ba7e2eedb49680422b01c0251e973f13b94c1f99bccbe9974972ba413a845ea7f4aeb933702e9f6948e24ac606519644ba9f85748b44e67b28a5c0312e900119d0df5eb95ab8144973cce4d49d3dc26424a57296d8baa9e051747731b512ffb6803ad63ee1e46123c8d9434100c514634f9ce4776804a44b1f0cd7c212c0696c978e", 0x9d}, {&(0x7f0000000440)}, {&(0x7f0000000480)="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", 0xff}, {&(0x7f0000000580)="617ded3ed20a5330993a379093f41124ffcf10fabf143b4d42b1114ff73eaf089a5ac6c6485201b9da761d3411245dad8f73da85024468d0a5b96df30d", 0x3d}, {&(0x7f0000000700)="3b74abf7670e793e8de903ad817ec511218daa15f50c2551799cc15da644405292cf93bdbdb69acdf3305bd972c0b88cee648242044e0e402af6107f1007a40023abab3cbb3cda59982fb4a6732df4fb0d7f56881865311a", 0x58}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f00000027c0)="cc7c2fa2c434746cfc3b16a8b744d4491b1e1bb4c31dcb98c37a86583518f13c5166890600bdba7e393ec9249b66d35e1a4700ce6216b2c18430e5293b276436b56b7ea75859474ff9d61cf594d54ab0e0a77045b55c79e27d93fb47d2fd469f269b2d817dbc93e429d1d7ffbc4f43e9b8b7443760", 0x75}, {&(0x7f00000005c0)="8e40f75c913989e2e482a7c178df", 0xe}], 0xa, &(0x7f0000002900)={0x30, 0x111, 0xe18, "8498db77125b0b3962acf2c101390fdcd2fe03247d826a867be9"}, 0x30, 0x4040801}, {&(0x7f0000002940)={0x27, 0x0, 0x2, 0x2, 0x7, 0x68, "05b87af1a4055f4bdb4e3c668ae9bb93ed180a04b2a53f335a8190906e73f29a25a16a4707308169ede26078965a437b3126f715bb7da3bbdab068237bceab", 0x4}, 0x60, &(0x7f0000002bc0)=[{&(0x7f00000029c0)="f7c4e0dfc9f696318de9d4f0148182887b0a6332d4ef0473db47441a821fc98169b6283fb60b9ec977d664760809ba22bc3f50fc801a088560f72fa529a7ffbded09556679801b7e07171596de1a6a8fe2d4ef631a16f0a3728986e216e48b351b734671584c191d27a2ecc3909396660ae1ad5ae1d6ad7e85df5a323683d7a70b6a94199be4bbb68732cedf4f55180735c755df4b01867c54edc7881d61683e92b9361ff057dc81138d4e823cbb9ea976f62990a4bf", 0xb6}, {&(0x7f0000002a80)}, {&(0x7f0000002ac0)}, {&(0x7f0000002b00)="793d385ccee6a3558bc51e7776677654715be194b40d90442c342546a7acf40f9fed7b33eba00fce6d66d0fc37f7ae5e7fb7b200299eec8a547cf353bf3215a79e2597480b4d32f92eddde6233f9ef30811bc96a1fefe61f9823", 0x5a}, {&(0x7f0000002b80)="60b67a3b8fe907110277b3ac5c77b4f95a85f29b0bfcc6", 0x17}], 0x5, 0x0, 0x0, 0x20000440}, {&(0x7f0000002c40)={0x27, 0x1, 0x2, 0x3, 0x0, 0x1f, "5536783037a341eb9d95d869bc1b45af6ed58e01859bcffb450ae08c6d82ff7583a592b654efcb94b7ab19006ba3533c915f3a0b56e409af8b73347fe9df34", 0xe}, 0x60, &(0x7f0000002f40)=[{&(0x7f0000002cc0)="a936ee4a70a8d33b5e28d5062ed8b1a79c403e8efc662133dbab2278bfc6a65a6dd44871bf7ad96456c4d5fa49756a9bd1f4c568109d254e7a3caedec7af883dbbf6044704ad2d3f3e37807154f5a456636b4a6e994a2a44e12cbdc3a303214de2e5a095057f53ea732081e3c17ed43e6de7a6b226b2ddff2a9dd5b4ac4bbb370accfe5df9ac28181df363a7366248675214a1570ac99552cf30b4973e54c4256e18b432a27f0552b1f9db19e3f34378623e24250964eee7606bddfe2d53d3e5d0b3bc3a44443bec0c7fe85c6ebd5e5ad2734384657a7357795bff45034fc40248acd3fcf59dae18164b1e71be5eab", 0xef}, {&(0x7f0000002dc0)="f8b9b6117ab9126ef99f8ea5ddc361bece979fbb12d82cc7486e65e2f3610b1c7d5fa2bcc2f06300149896c16e18b27ded986fd213a0b9ba0655ae429e4d66d768610ca3358fec8893b5499f8d72d19949a5b31124a2a3680437fb2917c7cf752c24385b89ae53cc8602ae10934ecd5a94da12588c", 0x75}, {&(0x7f0000002e40)="67eb8d865d9a8a1b426e7ca8d5deb09297f84a38d345994f7c5ac0b6f709334fe37d61a05a5b2486ffe9fd087a967feeef9b9fe5c1c71f0415caf5f653e9ce", 0x3f}, {&(0x7f0000003180)="ca53fb624b0560c080d47834308f5b0e13d324c4942ba84415ef83870b6fd8f55fe3cd0e75b9bacd3dbcf8e7488434e1b7f3b0fa65ce3991e891528e5093f6982f7855b93bada267cdbed2d5b92a066be380c9251b33b466126ce4fcc22087cbf0ebfa861b692e24ce18ec4a7c6db2e5033e4cb07c50cbec3530be478c32fb5aa3764edb9bb1f2713e0289688f844fbd01c74309f1b914fac047ae8c73f5371e287e1e7751051deec8e9ca62642fb6029f2719c1febebf9ccd0b96e8d628d2b4da60b82f8e0be89141348b675e89b727b133e1cb6ed38c01e9550d2ba3858ce16db5d4a5395fb78cf8e6057146e22dab2deade155129cd03972a48b9cdff604490443b25336973ae15203b34168c862776eba0de47eb9b6640d3bfec54b2731d8de71191ab3bdecef7f2efae24e12484401a1bd7db7316b37a65d415dbac2c6a44ff5b030f0625435a7de422bf042a35edf39ec3d2f0df45e6d31084ce9444ea5f26f92b634059bdcb01544467a01eb41fc3d1ca39d7a372680a04f8ca64c920a262981e23c0d53166a98837a38c77ffa9687996886eaee70eec1a9fb4aef60d1bad9f317eea73ca0c3b01c1fa6c95c5c4064180351f9dbca9dbc2f629ac9e1ce4938924dd7b1e62598ffcfae9ebc1697549796aad7ca4586454d4452164df666a508147a3d73499a51fe5fab3363ad681fa27a53e83056a9d1d88a9d94a1929d445b2ad8b7d4e055f20d99b8553010e542393087fc8438606a1d3a1737e7714add4852bf98a5a170e15b16f7eebaabe56602dabe028969e85eefc23fd085f86259a753f5eda5d13bcf4fb5304cb47cc4f06c77a0724d11b39ae67b3e54378f589e855e9c833b05f1a5f0741142aa357bd83ea8e570c846fad4f8860b43f967d98edd24684f3a5e02f61f14c7dfe458014525dfeed5d52bec3b837d8ca9a24a778fe22b4432bd67ca6e0c1d3cabb1ad98ee5d2ba6533508537f037c3e1823885b1bf8c5dea63446cd595253e64dc91a15a31430675a967539317d7882ce44564dfc325151ca0ede25aedbd64ca7021e02dad597300b7d1f5e154ab58f0eb556354a07179ab5c71cd54677fecd98f4cb951ed06b06b4a1a1b11f609b0c45808dc6f0d532114685984ba9208312b2ba529488fa0f4fe868c436d1c4055f50bcc18732a05670b97b48f848b6042052bb38c7103b0c6692bdef43e04aec953640fd7118b2bfbe37bd2e63b75e37d3f6b6beee02ac79dd4639af133da4b5bf38748303fce1496ca35db7c629cfdad42d8c3d697b3c5adba9aa720460377cdf9a9688a806f556c0513a0ac3ba7dbf7ddf5cf119b17c1f5a52370bd4fb76590680fa579ff871036fabef11c868c349e64ff3757488289c6358dd6ad76d98eefa32dfd3403f24f67c64bdbcefc1b4e7b14a4e4eecc585aad83ca87fbce748d7112c07e3d8ecdded75d7381dd31e215a6c585b01a699620a79948191ba8165ea99977ac314cdb12e42b89ad73aa0df0f29b85c17d26e977009eb8c1bdd98ed72a950a910f79c9d643cb321f31625216f48c2fe14d139bd044ea100251ac0d34398c1f5588d123b13b44b8313d1517a0341d547364fba494abc32701d8870e1657fbb77f19c36655c1282f7ba806e44aca479e459e916d79f5be60d4606b5ebffab5a15fe9710df3238717ad631442577b984076b89048ea5d90d62eda5ba35bc03a55ea59faf0008a2856838b1c56f879bb0b6762fdea1668427e2e9e6b0fece8defa7dcf451bc80ebadb6e050e68260ceee8ae118760f13dc418099e8734f41915394b5decee0d9ed85a462edc9048582c2d9a0c226087440baef9b8cd68a6f728fd0a61d9f6f30b0addb5eeb1ce55c2852a18066290e1888d93dd408b82961cd7e1e9a1414bfe93a08c9b1bab96f3a29bb7ebbfbdd23cd7fa9c2800850eaa06dfe19336ed85147ba15cdd57b92bfa0dc9d9d9a675d7d41c865ed343331ec8648c2531e2724fc6a8131dabbc6b8f404282a1e0c7a8645a5347b472e8c5463a3fd514b6b9c997d4848d72ef59ebcba1c525692ed0ec22d35d4f660bec68c30baadfa8188743bb43ced963bc6a4f3e209a2ba544cb83c28ed5eec247b66568b2eb00033ca6301280e09e1dfb903b68bc2fc1a2d115820ac882a861fbb50885351fb656722f81ddcdf65165c54546622bd20ee54be774aee3b3c2491796e54221b167d1a7999333978103fcca804401070af65f5553e463bd2999e08a2bc740bef8f0835f1cf9b2f7a8d36861d95cd9fdabc1bbd0b6f99cf9825e288769903808066319f47a8c9caa9a4a7b7959e39bb5708c90fbfccd0e2cadc4ba78866e18d49384750a258188bcffa634d27e51241064e94ea257cbe9506461d5da854b43bad64d13b15a917ea7258666e5d53adc3ac66fb762ca549adbbf958fc49b661f042de57bf1fff49d5e171581a3200308f728ff520d142bd76606f5da3c447966951c52abbe0831d883b604696b4d9baf33f98945a1cd13aa073e40727e66effb6372d1208b4222752d4f9a56c510f75f00cd5f2c0e02776c3b5ecc803f20e8a1226527f93e45d774380c0945d434edddbbdcbcce33a583aa9bd900319b358f31e9e504742f9a6eac71770407e69994ed4cace19e95e67deaefbcc1dc07e80d51f213e40d19bca5073ad1dca55664fad9903433fd2516da13e0b548443447c28992de6e97f1d4f3c01a378b7aa92954c3da5abe9d7b6cb66310499384745d00e841e745d3efe4a2ca7df0f0fcf0861c3ee5558d39d36e2dce55a1c1ae676be4e5e31aa702ee504f69157c1c72e67ec7602dcd06be2167d7c8bae576e8c4d73fcc6d844e30357f63f2807a23a197a7d3b9a817be3372666c8b2bca6a77513194d5ee080e40ff6b64e82f94b030cc693190c189dcfff17865f5d37cb5a6422ed3030ae07578b352beba3a14c189ea8f5f083c4e0b6cc4c107664a26cf51fc399d9fc8bcdff87464b7048a39f7fbc2d69e4c60ab87d589b1a4362f19d9ffbcef1ec90d020254cd17c34ae1412187224d4a392301f82ff48d6b89bafc1af33b3ca61b8af805db97b9497194e3b212c47948c993893dc3ead537b1eab31815a5706a12bccadd1db9751fae0ce4b2f45dd137fe9302a3158ae9809b4cdb19786681be2444496e81b35f0ad768a01d3b084a0799556faaa3ffbb5f7c17da3794f854969cf4b14311e4a3f093c86119486616fb4f3057d3f0870168b356e14ffe26e2ea8e8ff62b6f8d04e513b0b131504d8c0ecf9b5ec0700a530540a7c42475cc328936bea604cefee516c30de8fd59c74637cb2c0932828cdf2a25c12feffdcd64f5f4258ef9c974f59a8b1d4f903b9f97e9d099520281c6880ebf42cbac7562b1d201bf31cb1318ab27d286c96f9f0fb44f1f976c2e11574583ffa9aec161a80aef6d9e4afa3775cc02a496c442ef28291962f747c639801b63e54b95154d4753aa32af98fd6d5e5982a828eebbfeae395eb6bf9e697303365f0f6acdc1b9dd6b222a117710bcd22ff0bb6d288170dd605b4f58784694988d72eb8db0e45282cad39977c3069c77f37c79b3a254e0be4d1871f7b24ebe7e9a0700dd5be58ea667fe3d36762ac2d52acbe5a447dd40844320d0e31d2ffedebad23ab5726099bc3172f1e94360aec059bd1bbdc3370bf39393b604c5642635d6add0a984d0c1310612a44f7a396801efd1aa9fe4d186a5a11e9e0ce4c26b30e080c55588c6e16d346dd7d9a79201ec2a703d54f3fb78df9341938a9b30bc8b7da1fa4e3c70b2cde3b759ff0ce5e2641500be136a37acf007132bbbaab7bef97c334ccb66163e29c5c8e21ed7403b9d371fee1e4290d724e59f0bdd376e861f0390b1c202ed77edcd036cb8c2f2378ac78140508c54e30728a5462b0aa604493eb9abb7881cbdac847be5485e53de4ee1ff07cf40c2a8cccb946723b587f171afa4662ccbb8fa512860d53cd5cf08349d4813e48f4f435fdd65913fd98cb5ab55c618c1bebf43c243676519519fe25ee9923adbd3ad68e3c3cbc76193e660691fd5d4f5f558305f8a30876847d648ca25697532c2cc36d82d5543fb236bc1696aa3288befe3f768902fae9438534f6f15f4317787d9136e7b03093699189c54f16b17027868c8ab68c9003a8e692fa2a141aee24b9637f804aee362328f71c28e3ac1ed03680511e6fc38bab4732bb49308509b5ba1b5d612966234205806c4acf761b9cbb8f388f7e75f3da94a863146d5177b32a2fd2c3ced9ad9e7d3497d0dc72aee11edfdedf695449126411bd14be24f70f97845e6c6e6732d0e98d4f9b1c64a9de48d0afc77fd43002022e64bf457cd54e7c96734b0df1f73a548d33f93acb2e1a5492daf820776084f965fe49c113440422e9da31d93c0dd60e63770d1d420eabf263033b75d438b682f5e53e69988764ad5167d78fb273ab60654e3d12646d11850739dd66a8cba26e540ec3550476f6930683b896012cbc437310a4250aaa3d7209545e06ced4c9647d9f6110d28db39835c5c3f1fcdc69fb49f055072ea32b30dc73d0ba9fe5e9b9b91609438daa6be890da62f85091c7c20a40c35595dd8623d0ee943e96f0ac721453134ea4b55b5449886ca8b71fa6e66d604d2412453ebe470e0e395eca7beca375e7dcbda9526bede04002150ee48e43b980498adb58638a10baea8044a6d4a360c199fe58d2dbcb2f09c82db7a6ea641e9dca61ad0425fb735371c97e165ddd29bc0d4fc3e3588505554c93380af54df9d9d48c8bd5d00db211f03db1f313e341970d8a360ad68f2fbc71f80f8135aa10df84cc5542f45273fde4d37fc09bf3af12be40bd6215bb0510267aa6647db9196b24d11052facf2aba2ee7a646aa7951a9c7c2b7e5140045811a8ce8133f7b1f8cce6021d3369e3e68cc687159ce87ec56fc6a4adffeae6f4934fa421c95d04fb03bcc4c98ab6f29ed5de194270cc90b90166d0e5b176ab89ed4d1f09226476369c4cecc3be7def0050cbc500649e087746812470e923dd748ec7f81f372f8cc6993eb9ddfe2bcfc40139dc04627399cfa0543409573c0eb3a111dc25a3730fe2037b59b1462045a9d7fbc084c5f5d888bff3214c723f8bf322d2f57fb5ae5ae062ebc30e2c337647ea985a59c2cb252b80edb8c235a3e6a1079230eab70538e6e0bb7688eeb76569f90b1fa01bf9a59665c5a1ad1d9679d71efdc0dd45ddfece9edec5b11f4e0b33587970fafca6c02ea7e78e5434cc50103f62ccdb4aa21766efbd67eba58173bcb5543436b1914b9892555c4df34ae75ce2b4013e1bf1cb50ebb597bcfd7387bc5f1f0acb0609493a4c4b2c2dfaf2f17cfee8a9de79a2d6d20aac0aa80647bc8cf6db9ab650fb5a8844c52825471bd92e201e9165b503a358ea31b4d87eb161e91e8c2594bac89020fe73e578670cd2fe490b5658250680ce28fe2d96466526529d111ba446e8a443cd4ed00ef5dea7103449f62eeb9bf9abcae3470d30e2206f890e79b349ed0dd7ac3d81eacc0a3876693b87a23efe6429c42ea33ffad6ae954a0cdd9e35ed125186c648a444a0a701ecd4858d475de3823c7f95e40cd5cbb1f4b6df26ba1779bfa29a1cfb3a70a35ffc8cfa1f4edb445e7670a4ec5410ee70141a81fd1a7fbb873f931e1454977d3adb354c4790539f43e557a98c921a89c5a919b10afd55e3f635f78cb818aec48a23098551a798a0fc875d505cd9ec9e946b794d14850fbc734e352a5be80b9fcd34c45ccdae02f4276e47e25b8f2a0166f5a7332e4d34c8131f", 0x1000}, {&(0x7f0000002e80)="c264a6f438c2aeeef1bfc494ddc23d6f2f5aaaa7dc634dc624b5c08134f9e4df0df2ef13a0bc1a3d08bd1f4190b9128e8be5dff8dbfa4a5accf313402def5331300e57ae36822eb0e3d6b3a716651b7f159bce39af453fe916d7cd047ef837fa7b09894fa62732801144d015ccdf778fc58a4a7ffcac594b8220e5a2765ecb072498c9ed83ea3594d515f8dbab66a8482eb0b78ef856e5bdea7407c44c2f32d98f3ab2f6024405390352659c42b61b0ccbb901", 0xb3}], 0x5, &(0x7f0000002fc0)={0x38, 0x88, 0x8000, "0cf2a7c26af6f6e8fc2481d4fba8ab0623e11d04930382f767c647e316b285292afd"}, 0x38, 0x4004}, {&(0x7f0000003000)={0x27, 0x1, 0x1, 0x1, 0xf7, 0x1f, "10df0af0376121d6a8908641c769fb88ca2d3fa2ea26c97ee6ef3a736b3863456306b8df59a96413ff176c5fff5d704cfd71e1c7d1e392f7753b5c16e97973", 0x30}, 0x60, &(0x7f0000004280)=[{&(0x7f0000003080)="65ef96a5f603ab8f7d60a25c2661c1cb7968b6879d649ded6c6d6c9a7ec8f2db44e67ccbb086bd6bfcea440752fcfd9e7f82e3eda4192c507553672620c97ff923bb4f9dcbf2ef6e2daf3dcffc03e0e33a2715a4eb628b5a60ad73baed4bcb891dc524b826849d6b129ceebde65ea290b10e61bbc61cf1f6e21caa83dea9feb3525e3bc63db788020695179a11f879356e177224b63f4eca75675a97a38a", 0x9e}, {&(0x7f0000004180)="61ff3c7fde255727f02f3b30fdcb01e4a5030fb9ac556e638aebd5440f9a94354d9837816e3066ca24ffb54122dd9bc6d6266ed600589a8bf6c597b3ab4c08226e2d8ab3aae9146f84abca09a74b9bac3426836b8b4f958a3689873038ea4b07a83e07d475586b0ddc358f777b91ccc31aaf17daf0e88a9c6f4fb5fce37bfed43687f81857762c78514d65", 0x8b}, {&(0x7f0000004240)="4da838f9bcf8a0daef9c0a41f33ed42bae81", 0x12}], 0x3, &(0x7f00000042c0)={0x20, 0x100, 0x3ff, "6910fa88531bc42ae9"}, 0x20, 0x20040000}, {&(0x7f0000004300)={0x27, 0x0, 0x1, 0x4, 0xff, 0xfa, "2dc53a2593d3387c358ebc9ec66500126cea629141470d9d56fdb238c17c0e676c5a5b962e69d1dd9e60d6f1c14b044506e3ed7a33e3d7fe9af4c2eae0c985", 0xd}, 0x60, &(0x7f0000004880)=[{&(0x7f0000004380)="14e01b9720b590f421ddad78767553634dd29e8d212878e7bd1ab81ba55a681b09b3067f3ebfbaff0b8fe5008e9abbc5b8db4c22d72bbcd4568f9b73c69f4342a24ee7ff0f00002fb3de20febc5835bea27a451992d3b166ee36a53757e737377ceaffd136d0d5dd654c7ce2d712aa1884f72dda67acd22e02b62e9aeb1428f44ce7a5ffe9b6374eab39e5cc046e58a6a07f57c753a797f6f873498c93", 0x9d}, {&(0x7f0000004440)="06958f0eb845888b8475bbaa75e8fd88085b4eecf04d8fd3b2b8d93f6f13b949b3ab56937e3a8d8cb9f401fc2eb177ed6431f301db1711ce1144117d3938da4d666870f3c6bb0809e9561ca9277d9b157a7189e371f58969f0ca35a12ba5d04c9c90a2d6ab371c1f0a4ab1d88b657bc7635197a399264ba78e33d526ade58cc5880311ed57968fd37e60a526cb31bc675889912cd765b0e9213b8db002723fbfd57287a1903ab5a7a99a9e36", 0xac}, {&(0x7f0000004500)="dc7923bd17462fb3cce5f400fd9a832f5b2c797a9db41dc977fda1e1f13f795564c12f95e8e5a65481a86ff4c77d8446d19cf0827d6ff1e25cb532ee18e5f2bd66fc215cfd6bf6936cdd22b477a9c88808be7b6f3f52f017994290426a36c3e551a41fed053a3097d6f1faeecef71d21f74501fb28db8c57d1c6f08d04eef069eed3b7b58b3fe44baf2d905a0a653eac004180f51deac54e4b5b876846de2eb6d279d7334a0ee5a600fca0f1c0c033bb47dda9f5d989019fee45329bcad8916bd78a03bd6711d1caf058867f3f94292be0c875be81052a6793b52c89d3d9e6a609d4f0706c48edc4f8a55cff", 0xec}, {&(0x7f0000004600)="f3076b9e8f7419519993c020d68173ec530944ba27dca206c221af8372b153939901bc95baddcdd623d5aa926d7773ede77c2ecb069bc52d058692b6bd874ba7955e18c8afd3a8a08b5f108d6f8262384affade91259a82bc639eb51a6b5b829355fb5e301c28c3826464bfe2171d0df862b8303940112035706cfe7c79a516efa613ca3f024d6100efc236ddcc5e1a236a5ee73db63d4aebb5a87f58b781916e5b6d678b79e417632f6e9126d5f78bee54d7f994749c53452e2aa49bf", 0xbd}, {&(0x7f00000046c0)="dabd6808e6eb8f97712a76b84a66a9bebcc4a32b95e52618d451a71f710ade91db1e82e1973ba19e5e84e55983adf10c179012bb77999917f979d7c7aac30bb3340d7245e3362851f6ad4fc105268499d26d78f4810169a3ba895df6c102264339ef99e691d313bf25cc6b605cfe16ce5bfc5254395404187eb20880b81b5c00b370803fb95d32550084e737dd89b8070fede7a9f586395889ad9b9e3e72f4a2f81f72358aa3945d", 0xa8}, {&(0x7f0000004780)="8988adb1a506ae8272fa47f140050b3b4bfbbbf5ff3ab3a4fda1491fdb7a55a7b1d90713a6d3bc91d18bd6ca2a91b66c17355a4a2774d29671f04a55b70a718c760e716bd67de2d833752295d5e310199d8a162701c7a4c8eed8993addcd9573edb3f51adaf97fdc550e211c276d622464864284cab601c59f5371727eea9b42342460fb4780aed6386cd720ed4e8c144064e8ec9d0c581007d9615fe8635400400d89f1c285ade4a68ff11cce52f34e4082c55a3fe0b0166ece0a03099200bcf9c09a93911bc3f3574da2a5ddb07d53eaa0f028", 0xd4}], 0x6, &(0x7f0000004900)={0x90, 0x0, 0xffffffff, "9101030a8860f0ac024bf64da5e0e73dda46ac0f7a8b771e0fd7d2ec4ace711fc95f47ab3c3017a521e815d020f3463adb414aa6c2443d50c71e1416af9da8c36fa8dc7c687eab99667624620c0b653824afa8"}, 0x68, 0x4044010}, {&(0x7f0000004980)={0x27, 0x1, 0x0, 0x4, 0xac, 0x4, "2c4aa85cf0eb9c91e39d7d3a870564153c3622cc79e4322a2390d0012a68e5ba70a475a10228202ed87190cdad3d76e1fe57278dd6ae4e53e4379f819fdda6", 0x13}, 0x60, &(0x7f0000004a40)=[{&(0x7f0000004a00)="9ebf970331cc7feeb5cb911f89", 0xd}], 0x1, &(0x7f0000004a80)={0x68, 0x114, 0x1f, "f523d75b39202e049e2b6eb09da48b93ef41046295d7d69891fc3fd2c1dfe9aa6f5677e584fb89555f4435107ccd4426d45342a49d67e50ec1741919886f0d7988b2925c4a41907445f5983745236b6e25ecce23"}, 0x68, 0xc1}, {&(0x7f0000004b00)={0x27, 0x1, 0x0, 0x4, 0x99, 0x1, "00032641814e8e3a8bb39957474b60f7498cc47f4be0dd6ba04eb8a5c021e7435fc7567a0af6045a3061d14749a610c717e68a4e56429bac37d2cd07aea244", 0x4}, 0x60, &(0x7f0000005e80)=[{&(0x7f0000004b80)="66ec58e02a9f65e89e3f1814f3c3d78b9daf6c833264", 0x16}, {&(0x7f0000004bc0)="98c7de6e77b37acaf18b7c63473efb52b5b2de2b4b5b43c3edae46f6f01d2c32db2bf73a18c9232f1ec6740d739d6e448effe6ab1d86d51063b3dd8f9076d53cbf852f0998e2c9b94b0958bacce6c409124721cae3f5235d3643a2a535f3dee9aa680155c930f63e187d9144931843022a08d7105c2b9c710d13039c4c77d582406d9359bfba0aedbc10c08cd2a6b183e6c52479e4adec543a54c1091d883181c3349d3b392265b48a9eb1784bd2986033add6e5c78e346874f4b776cb7f0bb9262128116392f6f68840fc5a0f64ff3e799fe1d699e07ce0b01c352a23f1ef867bf144b223570dace2199a9967246c419def08b77b4aafe2ff6274d02062981465dab8492689b1809f0a289f617239e4838d760bb81f106ab68d1c5f00c479835819c71a616e28bda81fd96a86c01f569ac0e667df8e6b26583ef54d7f036b1b8105e0e5034414acbeb106c1c72ff8751966581a948a3a1a58e1bb23c76ba55b0d4413a1b898c1b57dbfd19b6ee18c85152e7f05d9a5dd4a333b54ec7eb44747a1557788ae00b72f604f186532244e6d143dad651b9fa4b45c1388a610ce3006e22bfb34f6b1f213288e9666a7846e3f43374eb7c4a830df3c3d310ec28c620ca628460e2aebf9a28e61c3db61adcf510ad0be6f0b7a10884a69dec3793eb9c35ee9fb2ed3411986ab6c93dd7467dade78a8afdb9fb9d2d48b6e199ebfa8a6bad0d77abc50d291fb42f6ab00959fad79f1d07b0702cc49d368e36aeff6dc7d2fe9ddbdd8dd0069b67a7da503e94f1abb1f045199e7681ccb02b7e3bafa2ec67bca2a1a746ef5f4577e386994b268a2aa3395f8a4bc8ee1c31842e36abf9c58913cf8d4cfcd0e542ba5d4450362c3bd5b0deb6f5ffcfc5cae63c4b5c1b99a1368b10c6898cefcd5fb11a749c88aecf8d5478701940e83111ae33ddfa8dc07600df343474548e458f0beb5cd558cd5d7424e04f6de2a190f2857ca34cb59856e18a8448d17e7bae6485cce82c526068e8c147d39a23ac75c07b691fe1052363010be9d2a7e2a1567cc980bf6b06a2ac2a0888263dfdcbf9653da6d75b066a6e99e1315e4e9fe056d5d733de764705708d968a6bd424a853b05effa6c7680a058d49b19e2de9af8c2d213643d7953f51af7cecab457b95ae11ad2afa8c8f5d9d696ad63b674f1f515fee49c514ade666f646ad2e195be1dd8f3baf30989f74b7c0784ebdf1f2d6d0f81cd40e145ddf881dc1eb3048cefdd790ab9c23345c7db471574d505d0cd25ba05cd3d2f3c82d8f0ae299874472639222d3906f4c9cbf6077ada286d04d92230cfcceaffa6d7d57c7a734b5ddbcf82feb0d17ad995c03230e58662a5ae77ecce8de82865a2ade60a8447284966bdc5051a84b1ba00796d4d30e28b05e7a3f1f7bd56cef73034a0a4444e6c02451dcecac4df21b2077e9a31a4cc84b75a91cfd3bee170d41d35d4e62dd561cca8922ee4a99aa54baaf1d263ae02aeb5e82d4427c967b3d5cd2450f163a55989ed58aa800d3bf227b6b80db878e1caf98798d2e08d86668d1d30cfb84e3e5d3f562dc4caa16dfe3a10f285213f3be58f326850191aea65f49e29a5c46dd8fff2e2ec77407765382fd7215b276ab9dc8be18d5993f4885ec51d95e297661ac66eed39e9f0bcbcb1f72a6a4954bbd9430ce33d1b91a165a29ba7316ea03a10d3cc2993bae64812b055be433066b973471a2bea24ada484167e3b587e8d3ed0f6c1a2abd49a32529de91e3cc14fbc90b0c0186392c017c2ce7945ed724395b8e320146bb40cdafa3576d33795ae978895b14a2975bf8979ac763edc56dd7fa8c262e273a0f72a89153c2ea2a3ed8e716379b462797640771d6b72b0805f782c3b51efaf894bde5b65c428045561b000cfd7b402c076191932a292e17aae41fa44a9d6472e25bafbfc16f4c31a6dcb6422463d5b9b213edf5562ab68fb5e89e6f827d9b7a356091556dc753f827a5f87bade8cdbae4a54dba2b183cc3b53f6356e33443b6e7366a43127baf76b7844cad03b60e24fe8d5580dfbd691d9adbf8ebbd9cb01150f4b956e2c93f2ad762526f0f3fa97a23cb489f3f533b6c40c856c77d40a08642f6766b75c45179f940213d5c68fc765d9686f81d96cf72d6f785405f7e75285bff91eb797453bf4ec1dbd25e8f9379c84d8c4fadc4ea8b41021e3e57181cd28269004524137710c3b64e24e71dace422ee053eeb8e915ad2735b7bbc936796893fbf1321de5e0feb041033123f4e1a646a2ac5296f9c8a89ab01c0215f482cd84553acb39212d121f7ac5b29e3aa51aed072bcf194bc9aa47432c30cad86b3f44bce42a00537eccaa60389be0551ddf6dbdbcea2401c531e51fb811a737365cbc86470359699085b334c02ff5cc161cfbfacc324e588aafbab7a109266824adf056d3931eee5bb219e8a41ded411b1a30f9b1890d5538b71b4e2418d2df72d81aa1ecb9ca168ede2fc661f85961639c59b7c52bd5f128ae06aec882c3ff78b822951966ab44b54be849bc61e83502e427259cb95ec9b4dc2ffdf08a4f7cb41ee5968819b81f7f0f6d8369fe105ca57bcdaaa7828e9ab5fe4b0c5aa3f01cae6875807d3c0df4aa6469b8e577d42cc83a7f55c96a780a572393682524468fa9ed8141d82325ce8e77402245ce4d3f6a4256fe02b10a15780a92c83d289412db9d45761d68febcefb738b9a6a5e52d51e27fbcda509db0d4dd44d69c8a8b90df69bdc8238012295727e1e5ef90c5aaf7ac75d5b8ea953ae43fc7ae786a053cfb3cd6f6f6e3271272f87a1ed9e746810446ebd0ac363f87e9b93c00e1ccf7a5e5722345508dfe4cd7b216a30903a4ad8ebc2df5439e3c9751e1d56534953c95d0d703fee9ede6cc5da1f3d07f03e2a54f618e7ba3143d3d1d620a7604952dea4a122fbc94c84c51762a0155ede484e61ef0d26e897d4c6fe38b94dafa3e0819c0d4e2336203c8a53a4a015ee22133b88287d0e40257a905221adcbebddd5f27b288349d0c60b0b3ff4441518d0d1d7d2b2dc5463bb472ce829e992408b7501b6790d25b5143e87b22b46e7416ae0262540a7d9865d551136916edef7570db5f95e5dd71eff7357daf841f4808c07f6c37260b6a1ab979dbd1f1d7fee8048448777c02b0a0f10bc24d03b98d6017a5ab57e84302c6102ff0bcba3ca64ea4c0b1c14903d0faac8abd53941a759bc2221484522fe030758fc47dbdd2cfb4b13adb094a4274f99d08cd1d051696942a6253b1cbd1d0303745707b175894d9a66c075340b8620ec10398ef374baf94f1d748047b0ce046a11e85089279266dc0c3f7bf3992bf275494db4d1352f5d353a06cb61a8ca85f37f5f05440f9c9e0a520ab70a41de94bad9b5e500a63991fa613620bdaadd0576b2964902e4132dbdd8ad19b10c44e5ff4d3f1ddf02103221913f696343a79dddfde9e796dc0c91806cbb0cbca8afbd573cafc77d3ced267499da499143ba6dc67028da143ec446c4e502859b868e48d4088085312141ccd3643ee8ace7a0462aa0684cddfcbf7b5f52980489c5f606ac4cd1ea8f573e34c34d112934105dd20975d5e9b986ab7002753017e421a5361439ee6eb5fa2c15f795b31887f20fb5e8fd7ec0ce4b48e009a665d9088c2c8b35749b869f535327c2028704d3e1064984e48ec522c372d7b8b97bcbb27c15c6e45edf5381e368229126d51b3ec2fd65d64ebe5bd2278878b10e97043b918759546035292471078cdc34a700dff1fc1fe88eab9c15b81682f4c905e743b974199a4bca08e92842f1660c3a9c26e7f4dccac63b77c71cb1c412b33d4cb79689d7da58518e87acba2ea4bbe4d389cae8c527e78ec1754928cb0c671502cceb248068c1b02d1e2957a528acc7b561fffa398000f0aa7ec361dd41e51ab7f5c29cb484a2529393c54e2a5b8577e8bc535c435bcd8373595e5e853289466f770b2f4d555150ce3bae172787f938a2789ac350ddb1f70d8c35e8bc6e3c1d3ae8a2fc0ec6a5124f0c57214a5a545bd46d38a89d9e3480672a59c84d63cd1e9ba500f0a10230c9c816da2d3f09da01b0fea07f1d1fd096bb30aedea3464ed779cf6612873653108ebd3b80cb1ed639a3b158949addbb67f69eadcea1f3aca9db0c5612e830120daf10d0a165a069594d9801bdde3b729c43308b8f1efd95783e2542da7a16088b0cacf679e70e197e9ee5821c7d47396da58e144ac480bf72ff15686f93aeeddc9f77aedb233c3297c2ada9f0ab330f1ab3013147057dc5c678c1a6e5f986cf1ecfbc9ef5936e714e8e0bad607ab26e89f96fa056de87169234815c00a37ffb84f0a03684c32f0cc2e7b32178f5cd7e3b650d0fe4dc1c8a7ed43906d3a7595e37283ecdf2cc10ad24ca2288f916bf3ef1e04bcbd280acf268d5aa534f44ea602f1fbe588e8b8a74f652abf2d2fa26d81a734eb25a2fa439f1e5d293e683570e3f5ca55cc4d64909675f7bcf1c0b74a523ded9f62b9a6184bf322fedd3da1f79420749f1d580a48ab18dcc02af97cccee7207283a86a1f1c350bc9add8a22d1ad61e3698be2035d2b0b70112a8b0b8d4646d34256f3ae5951dba307ceb70dd8c62821685a1270927b052e1117848225a89f2478e31dfec3219db7c11c38ae70d17f3db4422ad11b851ed60c673a0bfb246e5ec6e5308469bcdf61485754ac303ed11a629defb8a7bea2bff6a21389afeccfa39d8f1813a341f9fc2e7a1e1b77d9b498e54a51d88d44fd0c4234063a85a08a5eb909b44a13b652a8ccf4d8dc911c285b589e63e0624db153906a6ab026dd3786e0cedc104d0e46d6ddb40285b77a6462165e9d218dcec7a80a5f4b4354e0bbb829e1923126634400277dde2a096f42035fb4075eecd591c7ac87b620e9fd06c51123f395dc316569eccb3a1d88686fe0a9fc2a24410cd23bc48baf872c3c606cd154bf46f1d5c802d1399ef03c9531198c4f07e012f38df02c507b93c4572f13fd527a4c3b302bcb8f3f9a86a20099ac2f8f3d239458fb1ed39efff0d8350488f6a63204289f677303b3099b94acee3dc66456121c53ab3883102cc7420a96b35e0fe5fbb0d6b0f845f0dc026779e34a914fc2dc3c1f6bd39b382e4e0c230ac7ac56a22d34f5d1177ba1cc732b729b544d13409b5efb960c7fd39ffec530b32260c587d4498595c7149aa1696975e83aee2d00cddd7b8979ed6c10da686dca3561632066c97b11571644d5e027c663a89855a29d0372066c8fb9e9d11a2873fec087bed7857a3036fba1d55d22dbf8ec4efadc9be4425c25971c6da89e309d5b054bf66ec3606afc792dc11f6b2107b6381eb84fdd66cc85f491f1e9437983d07c45f61f2b05168cce6af17227e5cccf30555dc2f8530debf589bc66741507c2e7b6302ee7e51595fb5dc1d09d3a186e13d9aa8f30340f789e8fbe96e1da803193b912af63f7f6b2063b1e058d6b2cff0e717f7776b504c110ca7202ab069e5c2dae4e86fedad72cefd4e69e208c61bf0ad727beb253cbdd7fb5adc79799d161397e97aa583e5ddf63d480d03d974b15bf507e2e93ec458c6928245156391985ca0741a30ed677b8f40b8888b41d06b080b23cadaac788548b1c7e5a81b2241db24ca0b653551bd26167957aee4283cc9d2368202437cdc0a06552fc3a5a61d9bb2a0b29a92b183ad999a125220393b3b9a26d843c8a08745bc571150027d93197cb4fdfb32167f302d2bcfa58857ce28484a4e2f5bccdc313858bdb6f2eaadef224eb39f45dbcfab72fa645cfe4f5b0bf12da", 0x1000}, {&(0x7f0000005bc0)="21d921aae5ed0dfea6eac2d3209b64f836e0b23c7ffa2c13f40c809a9a24a3f1e8230281cee35dbd7e295288bebaa8a2809400ab51150245b3cdeb6ad2e3dff9f8abcbefc4bed3251558663cdc4f5d1ac6cf908950427486d697c59090b4fd0376e1f0909cc3dbd44aa924a44b2e0443e48b7d462a8bca3983abd58de37ec379aa13f0225a95abbfe5b30622e070a37cde03f6578faacc1c067231f3e8ffb1ea629aa600665baba165e39224f8b1a6bafee15b42cfbc71229550", 0xba}, {&(0x7f0000005c80)="e8a433a406a7ea740a93ed38f417d90836ff4ee11eb930a698db64d072863a695351b98ef6aceba4d622cc843d6a435b295c26f3c865e9e2aeb6681af8d8cfbfcf7b5182531624d845756c3ffbfcb5819dd2a5b69b06e2c9500e15b5df097b22fd02317d2a72a426c374afe4705177bac62aba7db78df4f4f6c82a8dae7faf4ab60eb68e761ebc12c62b09089b841c98bac8f48ef4088cc061f9ec93283110cc0c846c93655e4e1f321df4b76a51d83ff4abf4b57d1c0f952a2e07d4581ba41cc2e40905f556f048d6926995b15a2314e1599ba69ae7d7c17a220d7fef8b2de192c36f595eb8a41f27439d7e40f1c99d403d0fcac56f27", 0xf7}, {&(0x7f0000005d80)="f6b7243410528b9deb47680a809425f58ba86057485f05bf1ceb99122f722927999eb8a75387b3fd87a36d3b378b274b008282bf26f0bda96c8cef5e42669219a6992261d2637f602ae7942eb8e51d081841d522e4f869fa948b5cedb749fa490820f99d693abd27db1a126077f7ca78e8464cab595ad51e692480fc2e9f7f48f19269f4f559b083f77d913c18d0632473087fd26be93f14cab045a6c402e1aa21bac7ae5e8ed474eaceb09eee7acd609fd656fb52ac3105ba4d46a1de494c4511003805ecfde3e59417b8feebf2f2e8ad3126e1d95fc564659d05a0a7064b1b4637801c2c06f3db5146718aab95949f3765", 0xf2}], 0x5, &(0x7f0000005f00)={0xf8, 0x102, 0x8, "94ad1a3544d0827d9b44b4f0ba560beaac783ca0dcc97f3f57ce8276c4af340c5f5e79367ded3bc6227f6a2fdcbb6dc41ee80d4da4db87c32a30dc8a99c5cbe157435173b375a725a2a80c0733f0c49d11347e8a2b46598409395f0b42d7fe7457409d6847911acd9d9d9f9a334662c2dde882fd37d2a6a03a0c09f9d3430610d32e485bcc8714acac8fad60d16ca105c24bcd2efcac4f1fb6d677c0e27a1fc686cb3f6ce14e923a6490961ec7697e0a774eea1cb67d2ffb61792b85d592683f89e2157fdfd21e4faf6283e5bfeac7a1befb2a8252afbfb2279d624ba5acf3e1bb1c755cb1d6"}, 0xf8, 0xe1cac90032d4378}], 0x7, 0x2db8bff2bcdb642a) sendto$inet(r2, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') preadv(r4, &(0x7f00000017c0), 0x1000000000000277, 0x400000000000) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x0) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002012, 0xffffffffffffffff, 0x0) 02:30:48 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) close(r0) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180), &(0x7f00000001c0)=0xe) r1 = socket$inet6(0xa, 0x100000000802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="35d4a7cf18000000629841c900"}, 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0xffffff0f00000000, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="7261777401648f00000000000200000000000000000000000000000000000000020000000300000018030000b0010000b001000000000000b0010000b00100008002000080020000800200008002000080020000030000000000000000000000ffffffffac1e000100000000000000006970366772657461703000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009001b0010000000000000000000000000000000000000000f800726563656e740000000000000000000000000000000000000000000000000000000000000000020073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000290000000000000000009f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055643001be8cecb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000020004e4f545241434b000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000d00000000000000000000000000000000000000000006000434c5553544552495000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000340200000000000000000000000000feffffff"], 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0)="3761d502c94021d672bf6bac714917972d34e1971fb8cd6366c952a7637cf0a548abfd5ee945d3693b30068868a12b32d7c9d52fbfe1c4057f738cf5e5184e", 0x3f, r2}, 0x68) sendmmsg$inet_sctp(r0, &(0x7f00000000c0), 0x0, 0x20000000) 02:30:48 executing program 0: r0 = socket(0x10, 0x800000000080003, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2010004ccea4b1d42a886c000000100056119618322fe35b2508000080005551eae1ef92460bcaa3f20800000500895d3e337361bb643eade161ddcc61b330b1ced400ff000000000000000000", @ANYRES32=0x0], 0x20}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="2400000052001f00ff03f5f9002304050a", 0x11) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492805, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRESDEC], 0x14) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000080)={0x4}, 0x4) 02:30:48 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000380)={0x38, 0x2}, 0x0) prlimit64(r0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x10000}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x74782d441c5f7063) rt_tgsigqueueinfo(0x0, 0x0, 0x4080000000000016, 0x0) sched_setattr(0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000700)=[{{&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000480)=[{&(0x7f00000005c0)=""/171, 0xab}, {&(0x7f0000000100)=""/63, 0x3f}, {&(0x7f0000000440)=""/4, 0x4}], 0x3, &(0x7f0000000680)=""/87, 0x57}, 0x1}], 0x1, 0x10000, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) r5 = dup2(r3, r2) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, &(0x7f0000000880)={{0x1, 0x6, 0x3f, 0x6, 'syz1\x00', 0xe2f}, 0x1, [0x0, 0x100, 0x9, 0x7, 0x2, 0x7, 0x401, 0x4, 0x3f, 0x3, 0x8, 0x80000000, 0x2, 0x51, 0x0, 0x2, 0x38a, 0x7b52, 0x1e40, 0x3, 0x610, 0x6, 0x5, 0xfffffffffffffffb, 0x802, 0x37ef, 0x10000, 0x4, 0x3ff, 0x4, 0xd4e, 0x5, 0x8000, 0x60b3, 0xdc8, 0x7f, 0x100000000, 0x37c06dd8, 0x5c, 0x2, 0xfffffffffffffff7, 0x784, 0x0, 0x4, 0x0, 0xffffffff80000001, 0x8, 0x9, 0x3, 0x20, 0x8, 0x6, 0x5, 0x7fffffff, 0x5, 0x8, 0xffffffffffffffff, 0x0, 0x6b, 0x5, 0x0, 0x0, 0x0, 0x2, 0x1722fc44, 0x8, 0x6, 0x5, 0xb3, 0x70f, 0x400, 0x4, 0x6, 0x8, 0x9, 0x8, 0x401, 0x6, 0x7, 0x3ff, 0x80, 0xffffffff, 0x4, 0x7, 0xbedb, 0xfffffffffffffffe, 0x9, 0x534, 0x7, 0x9, 0x8, 0x100000001, 0x5, 0x6, 0x0, 0x9, 0x8001, 0xff, 0xc8, 0x89, 0x12dc, 0x2, 0x5, 0x4, 0x1a3, 0x7, 0x286a1a9a, 0x80000000, 0x7, 0x2, 0x9, 0x9, 0x6, 0x7, 0x0, 0x100, 0x8001, 0xb5, 0x6e, 0x5, 0x1, 0x100000001, 0x6, 0x22e, 0xcad0, 0x1, 0xfffffffffffff8e4, 0x101]}) write(r4, &(0x7f0000000340), 0x41395527) r6 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0xc0c0583b, 0x20000001) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f00000003c0)={0x8, 0x4, 0x8, 0x3, 0x81, 0x3}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x0, @remote}, {0x2, 0x4e20}, 0x285, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0)='erspan0\x00', 0x4}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0xfffffffc, 0x3, 0x0, 0xfffffffff7fffffb}, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttyS3\x00', 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x5, &(0x7f00000002c0)={0x0, 0x10001, 0x6}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r7, &(0x7f0000001780)=[{&(0x7f0000000780)="7fbb97bd7727d3deb549a8556bfa7ca91bced2914b4a353e61480dc2b0b2c3bd8ff63dc9fea0e6cc61fe964f320ad75ca7e766dac559b8376ba19f0baed2d480362ad65ed256dde6659467197bd0e670fe3e352b9b5c9c0ed02c8dedeae60039abc78a975ef38610cce6eedb051e1fb4075e6c1c76d0eb708da486943281868c7d13f46657c61d3fd1c5ace4ae293b983285728c766a0cc7787e26c1116d5f81639cf3e18f1b4a4e040fc3aec7381a77534032902131f452979ef1169e5b03c47421b5a813b9bb39a53fa9299a2d8fe6eb5cc9df6d2e66de77681279", 0xdc}], 0x1) chmod(&(0x7f0000000200)='./bus\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 02:30:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getpgrp(0x0) ioprio_set$pid(0x2, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='timerslack_ns\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') splice(r3, 0x0, r2, 0x0, 0x4000081420000a78, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f0000000040)={0x9d0000, 0x2, 0x5, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x980903, 0x800, [], @value64=0xfffffffffffffffa}}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x502, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r5, 0x80044dfc, &(0x7f0000000140)) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0xffffff0f00000000, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1) fcntl$dupfd(r4, 0x406, r6) 02:30:48 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000140)={0x1, 0x70, 0x1f, 0x20, 0x7f, 0x9, 0x0, 0xcfa, 0x10386, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xff, 0x1, @perf_bp={&(0x7f0000000100)}, 0x100, 0x5, 0x31bcad86, 0x5, 0x3, 0x9, 0xdc}) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback, 0x400}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x6}, 0x0) fcntl$setpipe(r2, 0x407, 0x7) write(r2, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x2, 0x4}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) socket$inet_dccp(0x2, 0x6, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0xffffff0f00000000, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x0, r6}]) r7 = open(&(0x7f0000000380)='./bus\x00', 0x0, 0x14) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f00000000c0), 0x8080fffffffe) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r8, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r8, 0x0, 0x0, 0x400cff9, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r8, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac623ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a92825a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x104eb, 0x8, 0x0, 0xffffffffffffff1a) sendto$l2tp(r8, &(0x7f0000000580)="a9fc2ecc80535521f655be8ad90cfe2979e1e5a9e8487b532186e3bb8395f577cec23ea3122992e6cbe011a84ad6f8c9a1e5ffbea3ca345024d39386c05364777a0d11516ac4b7f46a75d7964b2a6a72977dc8bf417a9c82b3ae036151eaed7a2dd3967282f3901eb748ab45c93b6ec7419fe4ac58f2372f1867a6e1361c62d93bbad63448e6d498cd5604c933f30c09783df8548c56b9f4b1547f118361239ffa6289df62b5fc3ed5c5d0a9e950ccd0a44614952b5b7f06dd0d38fa9fb810a10683189424a4d8c8fe58d85b56a7923a87ca5b02d5ff306ec3d70037af909066776689650cd5f9f966a49f225c5ba7d34d7bb0fef0", 0xf5, 0x0, &(0x7f0000000240)={0x2, 0x0, @local, 0x4}, 0x10) [ 327.478110] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. 02:30:48 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x40, 0x2, 0x2}, 0x10) chdir(&(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400b, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x6, 0x40000, 0x2, 0x2, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0xffffff0f00000000, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="7261777401648f00000000000200000000000000000000000000000000000000020000000300000018030000b0010000b001000000000000b0010000b00100008002000080020000800200008002000080020000030000000000000000000000ffffffffac1e000100000000000000006970366772657461703000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009001b0010000000000000000000000000000000000000000f800726563656e740000000000000000000000000000000000000000000000000000000000000000020073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000290000000000000000009f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055643001be8cecb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000020004e4f545241434b000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000d00000000000000000000000000000000000000000006000434c5553544552495000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000340200000000000000000000000000feffffff"], 0x1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000180)={r1, r2}) fallocate(r0, 0x0, 0x0, 0x110001) prctl$PR_GET_NAME(0x10, 0x0) [ 327.519750] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 327.557194] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. 02:30:48 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timerslack_ns\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x81420000a77, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000440)={0x1, 0x73, 0x4}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0xffffff0f00000000, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1) mmap(&(0x7f0000fec000/0x13000)=nil, 0x13000, 0x2000000, 0x20010, r3, 0x5b3c0000) r4 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_emit_ethernet(0x42e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x3f8, 0x3a, 0xff, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x4]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xb, "a78ce540cd4f791153d5dea6b259fe8000000000000023493b87aa0568f00b1c71a8242373244ad2439adc07df0a69748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c11b37adac15084dbaf736b41e5a803721d"}, {0x0, 0x16, "84f0da52ef24571313968050378ee824f4dffba7feed320557f7671975afc9c545c5ea6137c8ce680ba2d2e8794cc0ee661ab31313a50f67f637326bdc20eee126a2c281295ae9405b24d13dc48b7b6aa26e8a94498418f3472f7281922377d30a3b5ed2c6a2990e5ea6b275c1d5bddf59f3d1843df268e8c825c6b2cff208dfb5cd8283d0dcd52a6de228bf697d3d6506afec30ef7e07413c7afc1eb139e0fb1a5a643b4099519e31f3fd4457f0e6d586ad05e1"}, {0x0, 0x5a, "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"}]}}}}}}, 0x0) 02:30:48 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x100000000802, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0xffffff0f00000000, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f00000000c0)='gre0\x00') setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="35d4a7cf18000000629841c900"}, 0x1c) sendmmsg$inet_sctp(r0, &(0x7f0000000100), 0xa0, 0x0) [ 327.937628] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 327.961504] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 327.972629] audit: type=1804 audit(1581215449.005:123): pid=12116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir234494251/syzkaller.6Y4g13/72/bus" dev="sda1" ino=17020 res=1 [ 328.011790] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. 02:30:49 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x800, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0xffffff0f00000000, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)=0x0) get_robust_list(r2, &(0x7f00000001c0)=&(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)}}, &(0x7f0000000200)=0x18) close(r0) r3 = socket$inet6(0xa, 0x100000000802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="35d4a7cf18000000629841c900"}, 0x1c) sendmmsg$inet_sctp(r0, &(0x7f0000000100), 0xa0, 0x0) 02:30:49 executing program 4: r0 = open(&(0x7f0000000180)='./file1\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) ftruncate(r0, 0x1045) sendmmsg(0xffffffffffffffff, &(0x7f0000008e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="10100000000000"], 0x10}}], 0x1, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r1, 0x500e, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 02:30:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) fadvise64(r0, 0x9, 0x0, 0x5) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0xffffff0f00000000, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="7261777401648f00000000000200000000000000000000000000000000000000020000000300000018030000b0010000b001000000000000b0010000b00100008002000080020000800200008002000080020000030000000000000000000000ffffffffac1e000100000000000000006970366772657461703000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009001b0010000000000000000000000000000000000000000f800726563656e740000000000000000000000000000000000000000000000000000000000000000020073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000290000000000000000009f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055643001be8cecb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000020004e4f545241434b000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000d00000000000000000000000000000000000000000006000434c5553544552495000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000340200000000000000000000000000feffffff"], 0x1) sendto$inet(r1, &(0x7f0000000140)="fab9560a35fc7ed27e1ded95cacbd3e6e09554215012d4d4419e4b3657be57f0d8847c826d1a8ee992a63614570b333e203226b8c184a4d9544a7a70ad714665e8d2dcbcb1fce29f4eac67a50e5fbc63501a62aca5f1bcc1", 0x58, 0x40000, &(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x9, 0x0) syz_genetlink_get_family_id$ipvs(0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = socket(0x7, 0x2, 0x7f) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r6, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f00000004c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000300)={&(0x7f0000000940)={0x868, r6, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_AKM_SUITES={0xc, 0x4c, [0x1679f6a7ed9fafc9, 0xfac0e]}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @NL80211_ATTR_TX_RATES={0x160, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x18, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x2, 0x1, 0x8000, 0x9, 0xfff9, 0x6, 0x9]}}]}, @NL80211_BAND_2GHZ={0x54, 0x0, [@NL80211_TXRATE_LEGACY={0x24, 0x1, "499371fa6a15ecda4dbea29d4d2cacf6bac6de8e10fabb782c7682dcf8c8cb25"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0x2, 0x9, 0x9, 0x3ff, 0x7f, 0x100]}}, @NL80211_TXRATE_HT={0x6, 0x2, "6c15"}, @NL80211_TXRATE_LEGACY={0xe, 0x1, "e9d308e4e99bbdbe5a17"}]}, @NL80211_BAND_6GHZ={0xe4, 0x3, [@NL80211_TXRATE_LEGACY={0x10, 0x1, "283b8289681c0c0fc9edb809"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0xeac9, 0x9aa0, 0x3ff, 0x3, 0x9, 0x2, 0x2]}}, @NL80211_TXRATE_HT={0x19, 0x2, "e7b1536db9bc4e402ed6dba3d9afc3b69ee002cf74"}, @NL80211_TXRATE_HT={0x50, 0x2, "560cb65424fb85f0fee7e022696cf1be4fc084afabf898b14cf4e4ca8000923da8c56a9f886a9c20535f5ccecfb8c3ef8cbb6b97469b7be35ca5973bc16aa1e42259ef1d02dc707e170eef63"}, @NL80211_TXRATE_HT={0x50, 0x2, "10e24ea200861f1f67d2dbd2e790bf39500f5f0745ce4ab52ed8d1ad4bb2791e7625728a6ea5fe25f1b63ba4b658a1a1febb8ad134dd565ecb140a570bd8e1d7015a3fcd6e42427429853a9d"}]}]}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_AKM_SUITES={0x14, 0x4c, [0xfac07, 0xfac08, 0xfac01, 0xfac05]}, @NL80211_ATTR_BEACON_HEAD={0x16a, 0xe, "c58e64b625621bc36b8508d170c298c54f87b87f26f6ac6b0e7f69c5b82ddde76c16a50b342b24336f612576031d2771e131f3ce56727366d608a40776c05db3754f98969114d21ac81af538fbab8575b171c918d64a2e78fbc7367f2eae57e522ef0ad7580d80679d97dda94230730273bffef6d1454649502038bb2a9f7445ab1f2f4260d48128c93794baf1fa011d0f09508564eff6a75ee701acb5fb371ace56b572d20cb25415fbe1b445a9b9d03c0a005b2ebe366e691f7d4c17853828530cb7ea96d88fd77ba48a770ac51dea66f2d1bcd26b43f01e3b3cf5abe8299b0d25b3551338db1efd709cd2bc64038c6d5ca128afa358ce3ca128e4ab01b5d7c857009ebf841dc42491192e421734bcd66cb1fc7eec0f78ad3e8dedbb0c7f5620679292c6ed7ee33fb4ff7b2b5355186af67ec11744f511eb784a39646a11251cb0a2256d3862ab37b26b4028712e988f8fd8ec698e535458136a410b265203a88d58fe3547"}, @NL80211_ATTR_IE_RIC={0x556, 0xb2, "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"}]}, 0x868}, 0x1, 0x0, 0x0, 0x851}, 0x44004) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 328.079894] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. 02:30:49 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0xffffff0f00000000, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="7261777401648f00000000000200000000000000000000000000000000000000020000000300000018030000b0010000b001000000000000b0010000b00100008002000080020000800200008002000080020000030000000000000000000000ffffffffac1e000100000000000000006970366772657461703000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009001b0010000000000000000000000000000000000000000f800726563656e740000000000000000000000000000000000000000000000000000000000000000020073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000290000000000000000009f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055643001be8cecb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000020004e4f545241434b000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000d00000000000000000000000000000000000000000006000434c5553544552495000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000340200000000000000000000000000feffffff"], 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0xffffff0f00000000, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0xffffff0f00000000, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1) r4 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='projid_map\x00') r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r6, r5, 0x0, 0x20000000000000d8) [ 328.138521] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 328.173039] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 328.204670] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. 02:30:49 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x5, 0x900) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000040)=0x10001) r1 = dup3(r0, r0, 0x80000) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_proto_private(r2, 0x89e8, &(0x7f0000000080)="aecd8b33cf813727e333175154d3e3d60d7af5079a1393c7be325264d947a2ab68312f7098898520c4b25232ab9a95b4478600c22f8ee8be49ecbba69d0f79847b5bf0216cc2bf9a5c42edf0116112a5c0302e2f46bfa92c39d1470340928817a703408f1ee2d4ea712bf671d60dceaa636297d0c8bded6e8a21aa3428a4fe713e165545") syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x6, 0x380) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x5}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000200)={r3, @in={{0x2, 0x4e24, @empty}}}, &(0x7f00000002c0)=0x84) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2c001, 0x8) ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f0000000340)=""/122) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000003c0)={r4, 0x6}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000440)={0x7f, 0x8, 0x4, 0xff800000, r6}, 0x10) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000480)='/dev/bsg\x00', 0xa0002, 0x0) ioctl$FBIO_WAITFORVSYNC(r7, 0x40044620, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r5) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f0000000680)={&(0x7f00000005c0)="e28164769a202fedfae23670ff07bf66a25157d1e3bc0169ad51a9ec2c5eb5c41c7d37ef09231a6a3e4e01d0b88ae515cc8925deaa8694b5bf666c7d08638cd2a91f956fe4e4d3a3ac703b7a9bebf37ab5b833967aaae60a1a57a57beea1432a4be504b8818a7d590f8f0bed708defdbbc3c84be79bc5d47361e39095898185bc34bd44d", 0x84, 0x1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000006c0)={&(0x7f00000004c0)="a2f37dbae0c5761cab278de0e865e59a3640445dc459f935a5f61d569937c10563e3e84c8e36fce47fdd6b0df7cc63c3494f1f5b2570794b0d023430c8fd8cf86b30618ebe66840f2be2a9cd08f814a71f77d799de61dca7b1e4c3a1ebf5817ee633469f32dda9eb75c32de9985562760b2f4f530ae00402ac8469219997e4672d78f0598560ee3a0b25069a6659377088af9e74ba0651fa9c2339b8fb9dc2233936fc2e43eeaebe5faec18ed22ea23847b6cb610ba980865562ce9e01fef812812438e5a39edb9a9d80d51d5590a94a8d79b3e913ba6c738300f230b8e1ec55a6a708f43f1b3efdf8518991aa06", 0xee, r8}) socketpair(0x15, 0x800, 0xf7, &(0x7f0000000700)={0xffffffffffffffff}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @initdev}}, 0x0, @in6}}, &(0x7f0000000840)=0xe8) ioctl$SIOCAX25DELUID(r9, 0x89e2, &(0x7f0000000880)={0x3, @default, r10}) r11 = open(&(0x7f00000008c0)='./file0\x00', 0x180, 0x8c) ioctl$SIOCRSGL2CALL(r11, 0x89e5, &(0x7f0000000900)=@netrom) r12 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000940)='/dev/snapshot\x00', 0x4, 0x0) ioctl$SG_GET_LOW_DMA(r12, 0x227a, &(0x7f0000000980)) syz_mount_image$gfs2(&(0x7f00000009c0)='gfs2\x00', &(0x7f0000000a00)='./file0\x00', 0x48, 0x4, &(0x7f0000000bc0)=[{&(0x7f0000000a40)="534f00623852f122fcbf954ff2c2fa918776b770082c5d9cc9f67f67d0e346150934eb0a93eed8edde325ba2e287c42b10cb42100c498d65cf2fdcd7df95", 0x3e, 0x5}, {&(0x7f0000000a80)="e4597cfd2913922b6ee353f1f7cf1babebcea35a2713358aab813602cc09ce8aa80fe51b45fd", 0x26, 0x9}, {&(0x7f0000000ac0)="0bc6", 0x2, 0x9}, {&(0x7f0000000b00)="c54a94431b9d1775668fe4be8795236c74236a2fb885d8ff9b3ad538b3ac48f26035c81babe11650bed9f06afbfd05dae79b332890cecbfb8a01c76bac1fe7fc2e53d90032d2f2c4d5edc11b595015dce3ae6dc57e9bb6425adb627a6cfb977a6ca056de6f8226d1829f5df614ab40ab7174266756902c910588df033d902a9263b2366280f6a26406511d75e95b3ef08aebf4ab8d93b51d9f63374b03a421f87af3919e952e08", 0xa7, 0x5}], 0x2648e0, &(0x7f0000000c40)={[{@spectator='spectator'}], [{@obj_user={'obj_user', 0x3d, '/dev/snapshot\x00'}}, {@audit='audit'}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@context={'context', 0x3d, 'user_u'}}, {@permit_directio='permit_directio'}, {@euid_gt={'euid>', r10}}]}) r13 = syz_open_dev$audion(&(0x7f0000000cc0)='/dev/audio#\x00', 0xffffffff, 0x20000) ioctl$KVM_GET_TSC_KHZ(r13, 0xaea3) write$P9_RLERROR(r11, &(0x7f0000000d00)={0x12, 0x7, 0x1, {0x9, '/dev/bsg\x00'}}, 0x12) r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000d40)='net/anycast6\x00') setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r14, 0x84, 0x18, &(0x7f0000000d80)={0x0, 0xca}, 0x8) [ 328.246973] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 328.300586] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 328.311592] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. 02:30:49 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x29bab387656084f, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(r2, 0x1, &(0x7f0000000040)={{r3, r4+10000000}}, &(0x7f0000000080)) [ 328.356686] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. 02:30:49 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) close(r0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000100)) r2 = socket$inet6(0xa, 0x100000000802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="35d4a7cf18000000629841c900"}, 0x1c) sendmmsg$inet_sctp(r0, &(0x7f0000000100), 0xa0, 0x0) [ 328.397808] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 328.437466] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. 02:30:49 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x800, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0xffffff0f00000000, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="7261777401648f00000000000200000000000000000000000000000000000000020000000300000018030000b0010000b001000000000000b0010000b00100008002000080020000800200008002000080020000030000000000000000000000ffffffffac1e000100000000000000006970366772657461703000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009001b0010000000000000000000000000000000000000000f800726563656e740000000000000000000000000000000000000000000000000000000000000000020073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000290000000000000000009f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055643001be8cecb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000020004e4f545241434b000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000d00000000000000000000000000000000000000000006000434c5553544552495000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000340200000000000000000000000000feffffff"], 0x1) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)=0x0) get_robust_list(r2, &(0x7f00000001c0)=&(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)}}, &(0x7f0000000200)=0x18) close(r0) r3 = socket$inet6(0xa, 0x100000000802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="35d4a7cf18000000629841c900"}, 0x1c) sendmmsg$inet_sctp(r0, &(0x7f0000000100), 0xa0, 0x0) [ 328.439481] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. 02:30:49 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) socket$vsock_stream(0x28, 0x1, 0x0) socket$unix(0x1, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$RTC_VL_CLR(r4, 0x7014) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 02:30:49 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioperm(0x9, 0x56, 0x800) r0 = socket(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x100000000802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="35d4a7cf18000000629841c900"}, 0x1c) sendmmsg$inet_sctp(r0, &(0x7f0000000100), 0xa0, 0x0) [ 328.614993] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 328.809183] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. 02:30:49 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x800, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0xffffff0f00000000, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="7261777401648f00000000000200000000000000000000000000000000000000020000000300000018030000b0010000b001000000000000b0010000b00100008002000080020000800200008002000080020000030000000000000000000000ffffffffac1e000100000000000000006970366772657461703000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009001b0010000000000000000000000000000000000000000f800726563656e740000000000000000000000000000000000000000000000000000000000000000020073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000290000000000000000009f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055643001be8cecb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000020004e4f545241434b000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000d00000000000000000000000000000000000000000006000434c5553544552495000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000340200000000000000000000000000feffffff"], 0x1) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)=0x0) get_robust_list(r2, &(0x7f00000001c0)=&(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)}}, &(0x7f0000000200)=0x18) close(r0) r3 = socket$inet6(0xa, 0x100000000802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="35d4a7cf18000000629841c900"}, 0x1c) sendmmsg$inet_sctp(r0, &(0x7f0000000100), 0xa0, 0x0) 02:30:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) fadvise64(r0, 0x9, 0x0, 0x5) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0xffffff0f00000000, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="7261777401648f00000000000200000000000000000000000000000000000000020000000300000018030000b0010000b001000000000000b0010000b00100008002000080020000800200008002000080020000030000000000000000000000ffffffffac1e000100000000000000006970366772657461703000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009001b0010000000000000000000000000000000000000000f800726563656e740000000000000000000000000000000000000000000000000000000000000000020073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000290000000000000000009f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055643001be8cecb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000020004e4f545241434b000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000d00000000000000000000000000000000000000000006000434c5553544552495000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000340200000000000000000000000000feffffff"], 0x1) sendto$inet(r1, &(0x7f0000000140)="fab9560a35fc7ed27e1ded95cacbd3e6e09554215012d4d4419e4b3657be57f0d8847c826d1a8ee992a63614570b333e203226b8c184a4d9544a7a70ad714665e8d2dcbcb1fce29f4eac67a50e5fbc63501a62aca5f1bcc1", 0x58, 0x40000, &(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x9, 0x0) syz_genetlink_get_family_id$ipvs(0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = socket(0x7, 0x2, 0x7f) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r6, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f00000004c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000300)={&(0x7f0000000940)={0x868, r6, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_AKM_SUITES={0xc, 0x4c, [0x1679f6a7ed9fafc9, 0xfac0e]}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @NL80211_ATTR_TX_RATES={0x160, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x18, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x2, 0x1, 0x8000, 0x9, 0xfff9, 0x6, 0x9]}}]}, @NL80211_BAND_2GHZ={0x54, 0x0, [@NL80211_TXRATE_LEGACY={0x24, 0x1, "499371fa6a15ecda4dbea29d4d2cacf6bac6de8e10fabb782c7682dcf8c8cb25"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0x2, 0x9, 0x9, 0x3ff, 0x7f, 0x100]}}, @NL80211_TXRATE_HT={0x6, 0x2, "6c15"}, @NL80211_TXRATE_LEGACY={0xe, 0x1, "e9d308e4e99bbdbe5a17"}]}, @NL80211_BAND_6GHZ={0xe4, 0x3, [@NL80211_TXRATE_LEGACY={0x10, 0x1, "283b8289681c0c0fc9edb809"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0xeac9, 0x9aa0, 0x3ff, 0x3, 0x9, 0x2, 0x2]}}, @NL80211_TXRATE_HT={0x19, 0x2, "e7b1536db9bc4e402ed6dba3d9afc3b69ee002cf74"}, @NL80211_TXRATE_HT={0x50, 0x2, "560cb65424fb85f0fee7e022696cf1be4fc084afabf898b14cf4e4ca8000923da8c56a9f886a9c20535f5ccecfb8c3ef8cbb6b97469b7be35ca5973bc16aa1e42259ef1d02dc707e170eef63"}, @NL80211_TXRATE_HT={0x50, 0x2, "10e24ea200861f1f67d2dbd2e790bf39500f5f0745ce4ab52ed8d1ad4bb2791e7625728a6ea5fe25f1b63ba4b658a1a1febb8ad134dd565ecb140a570bd8e1d7015a3fcd6e42427429853a9d"}]}]}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_AKM_SUITES={0x14, 0x4c, [0xfac07, 0xfac08, 0xfac01, 0xfac05]}, @NL80211_ATTR_BEACON_HEAD={0x16a, 0xe, "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"}, @NL80211_ATTR_IE_RIC={0x556, 0xb2, "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"}]}, 0x868}, 0x1, 0x0, 0x0, 0x851}, 0x44004) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 328.991443] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 329.019251] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. 02:30:50 executing program 0: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="070016005b4f001bd57e060000000000000004e51a57f0b000000000000001", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="c9c9b59e8a95735d3f59f4010163372adb7e406208346a3089dffac12a736d7f2cf6cc8e3e4034459b8d5de92ae34c0965d1709115f7d36c639de405fb8780a271609b75bc290422eabfd5725b30cc785d8ee7545c3f058c", @ANYRES16, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYBLOB="00110008b2822dfd9c284812146bbbc4700260a5510a502bd4144e71a4", @ANYPTR64=&(0x7f0000000380)=ANY=[@ANYRESDEC], @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000340000000000000001"], 0x105}, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000140)={0x2, 0x0, [{}, {}]}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:30:50 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x11) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000100)={0x8, @output={0x1000, 0x0, {0x2}, 0x80, 0x7ff}}) r1 = socket(0xa, 0x2, 0x0) close(r1) r2 = socket$inet6(0xa, 0x100000000802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="35d4a7cf18000000629841c900"}, 0x1c) sendmmsg$inet_sctp(r1, &(0x7f0000000100), 0xa0, 0x0) [ 329.311399] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 329.335759] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors 02:30:50 executing program 1: r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff01}, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r0, 0x0) timer_create(0x4, &(0x7f0000000040)={0x0, 0x39, 0x2}, &(0x7f0000000080)=0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000180)={{r2, r3+10000000}, {r4, r5+10000000}}, &(0x7f00000001c0)) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x200040, 0x0) ioctl$TCSETA(r6, 0x5406, &(0x7f0000000340)={0x9, 0x8, 0x6, 0x8, 0x8, "01454860318900ab"}) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='timerslack_ns\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) splice(r8, 0x0, r7, 0x0, 0x81420000a77, 0x0) ioctl$VIDIOC_S_CROP(r8, 0x4014563c, &(0x7f0000000280)={0x3, {0x7f, 0xfffffe01, 0x7, 0x7}}) r9 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) ioctl$SOUND_MIXER_READ_RECMASK(r8, 0x80044dfd, &(0x7f00000002c0)) write$vhci(r9, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r10, 0x400448ca, 0x0) close(r9) setuid(0x0) [ 329.358773] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 329.416438] EXT4-fs error (device loop0): ext4_iget:4727: inode #2: comm syz-executor.0: root inode unallocated [ 329.442472] EXT4-fs (loop0): get root inode failed [ 329.458084] EXT4-fs (loop0): mount failed 02:30:50 executing program 0: syz_emit_ethernet(0x21e, &(0x7f0000000000)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x1e8, 0x3a, 0x0, @remote={0xfe, 0x80, [0x2]}, @mcast2, {[@dstopts={0x32, 0x34, [], [@generic={0xbd, 0xf2, "d0d49bb3c2e86a30789ff4c2b65c15f5fc48bfb7f8abe35ec789def2b995e967e216906d77630f029592d209fff06558a3078648c7e280e6c30e04269b4b10cb4666f5166569f168a57a9b3ca73714e3997c59965234f178d6d1ceb9b3ccc986a27b5251c859b3a6216ee46cf767521688ac5d575af029213e65290ba335b180d833d5927d9787b930dfbfef5c33271b6c3c48dd5ec921f5950f2522e8d091b019e4bff7c2512b45e7ca3aeed0fcb11bdcdb6a9103b11a935051552bfa0c69d73d65e5ccef89fa85b1c4e37da272fd75bcc081e2039dcb6b89f976e415167b610a5090847c91494280e62c99abe2ee9b3976"}, @generic={0x1, 0xb0, "26a3cd990f5bc04ff065a76ae71ab07c85c126809195b445e7d48bb54c52475afc8bf0c3fbf4b4002370f1ddcb62b652ec36ea4a83961b57edf7ce64c0384482a62ca5fc0fbc87c98da79c0a3ea2f5cbcc3ff85bad3498d204fb83cd1c0f9890ef557ee3135c2dcd40fc0d4ecafa8537dcd15b91a82b4e2ec3bbc8c8f2dfd77b88ca48c11473f1bc322d73e6d6b1db1ecca6b41eab04fefc7717f6436bd1beda42141e3c72c6b0ab37bd09768657ba64"}]}], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "93069b", 0x0, 0x11, 0x0, @mcast2, @local, [], "8f247b35a09e00db"}}}}}}}, 0x0) 02:30:50 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x100000000802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="35d4a7cf18000000629841c900"}, 0x1c) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x20, r2, 0x70f, 0x0, 0x0, {0x7}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x48002}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xdc, r2, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4169}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffe}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4090}, 0x4) sendmmsg$inet_sctp(r0, &(0x7f0000000100), 0xa0, 0x0) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) vmsplice(r4, &(0x7f0000001600)=[{&(0x7f00000002c0)="bc198391cb47590ed6eed9904182c701e23cec52c8d276b092e5497a291508b911d5ee0aa57a6a150bb41fe9fb", 0x2d}, {&(0x7f0000000380)="803c221035d4791d89e2aaf30ddc6002cf86b35ba2ecf1a84d6b0e1369f022cb0c9216fbdeabe6550e1cf52bcf23b6b611a041f4d7132582a547c548df2178768c807fbc5d0e2fd4ab7c80bd3816bcded9b1bb16114044ca1f2f19bcc6d7dfacddcb7e2f08c037a35775b4f9e8a2e545ef8829716b0579ad25e4029d2342cbf4ecb7f57ea90e076623883bec183640cdfb428c4fff12520bed855f86cc0d7cba304b4533243be9c7b2f0a25914290aa849e5455db23443aad315bdbff71bff7b39c95c1558244d8db0eb1e0f5947769055c236a8f4b249c7f771e2d5e512f7281ddf1c32e89ee23edb5ff75abd", 0xed}, {&(0x7f0000000300)="bf1cdef2cc0c609bd75e3d4f26fc5bef9794304560be45664f3fe780f25f33b9f25e1a14eb86fd93d8e2c2", 0x2b}, {&(0x7f0000000480)="5ed5d28c5abb305a5b6cb0b53cf6356979d7a4f117ef3b2c16d8abc7cf40630e97233376570741e5615a6e7deba155780188aa5fa718ba6f8a1f7dbe9ea94a81be0baa254641a540b9595f60193f4d992b4e68e8b01af9c235b4e43f7888e4c83e78c18dbd2ee045fe2701", 0x6b}, {&(0x7f0000000540)="1182e60230ee30b380af60a4ded2f1ff2e9f171b777e04f14d32b0ebf9ceb5794c7c259b446d3fbd25ed29ffd299751d749d178403d45d231162a61c788ad0ba2fb4d12c7f1766af6c66a999c6fbf65a83c00cb2cb4dc44242a33ed09d324243c159357200957fefb9fb786a471541433fe6fe0d7c866e0d5c3a08189681ad298f8e4a523fe4d455cf63194e01fd0550d17291c476f92fb650ce12f24e", 0x9d}, {&(0x7f0000000600)="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", 0x1000}], 0x6, 0x2) 02:30:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='timerslack_ns\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0x81420000a77, 0x0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x4, 0x9, 0x1}}, 0x30) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSBRK(r8, 0x5427) syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x1) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="6543099c111f6d1941732d11ae075ad6f2defb274392a37f3bb164a116a287cc7d2849665f557c4f7a99e4583cc63580d0f2616e1a83014026dadeec78208de0af941c14fbbc2404475ff804557d48ee4d448a8d06211f45355f1eb5809e05267b06332f5f4070e9e78c1d", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000100)='timerslack_ns\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) splice(r10, 0x0, r9, 0x0, 0x81420000a77, 0x0) ioctl$TIOCCBRK(r9, 0x5428) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 02:30:50 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x100000000802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="35d4a7cf18000000629841c900"}, 0x1c) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000000c0)={0x0, @bt={0x9, 0x1f, 0x1, 0x1, 0x8001, 0x6, 0x1f, 0x80, 0x4, 0x6, 0x3, 0x7ff, 0x509, 0x3, 0x0, 0x14, {0x7, 0x11}, 0xfc, 0x3}}) sendmmsg$inet_sctp(r0, &(0x7f0000000100), 0xa0, 0x0) 02:30:50 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000080)=ANY=[@ANYRESDEC], 0x14) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000002c0)={0x9, 0x4, 0x4, 0x40000, 0x401, {0x0, 0x7530}, {0x1, 0x2, 0x4, 0xea, 0x1, 0x6, "059e1dca"}, 0x1, 0x2, @offset=0x8, 0x3, 0x0, 0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r6, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80114021}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r6, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x3}}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @local}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x800, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800f5ff4e00000000000000000000000400002cf9000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001fffffff00004000632977fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x0, 0xfffffffffffffe09}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='timerslack_ns\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) splice(r9, 0x0, r8, 0x0, 0x81420000a77, 0x4) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0xffffff0f00000000, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000480)={0x80, 0x8, 0x4, 0x400000, 0x53b7bcb8, {0x0, 0x7530}, {0x3, 0xc, 0x40, 0x9, 0x2, 0x4d, "73cde6c9"}, 0x1, 0x3, @planes=&(0x7f0000000440)={0x2, 0x6, @mem_offset=0x400, 0x8000}, 0x6d90, 0x0, r10}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = fcntl$dupfd(r12, 0x0, r11) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r14, &(0x7f0000000080)=ANY=[@ANYRESDEC], 0x14) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r15, &(0x7f0000000080)=ANY=[@ANYRESDEC], 0x14) r16 = syz_open_procfs(0x0, &(0x7f0000000100)='timerslack_ns\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) splice(r17, 0x0, r16, 0x0, 0x81420000a77, 0x0) openat$cgroup_ro(r16, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) r18 = socket$kcm(0x2, 0x1000000000000002, 0x0) r19 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r19, 0x4008240b, 0x0) write$cgroup_pid(r19, 0x0, 0xffffffffffffffe3) r20 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r20, 0x4008240b, 0x0) r21 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r22 = syz_open_procfs(0x0, &(0x7f0000000100)='timerslack_ns\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) splice(r23, 0x0, r22, 0x0, 0x81420000a77, 0x0) sendmsg$kcm(r23, &(0x7f0000000280)={&(0x7f0000000100)=@nfc={0x27, 0x0, 0x1, 0x2}, 0x80, &(0x7f0000000040), 0x0, &(0x7f00000021c0)=[{0x68, 0x1, 0x6, "165d4b3ac05eb223068d17c2759dbdfe2433030000000000000016b891ba3af18d3e4d683bb28e8415de77bda8c9e79b9afdf2d57a158b9b89b6ef647a010e4584d103baa734255faced70c8619a86113c6e686b6d53"}, {0x50, 0x117, 0x0, "071daa268376686f50701f6d4ee19391387756149b74eace7140af348a1866c36451cee0c9631690096f657023959a5c00e10af4528a1f8edc258fad"}, {0x60, 0x1, 0x11, "a67d4e9c55aea3104593a99b6ef4c11c049040a5366577128f694a55a0175bdaff75f07a311efeb036a218d9ee20fc0d002c3d19bf1ed136c0770586b743aaba52a4729ae1ad7dce049c278efa37264f"}, {0xa0, 0x180, 0x8001, "6cfbc663f9f6dc2c16abba93e9db4be0871f3dca305161b342e59667175a62fd22d1a3d7d75d9479451c9f199910659d9f9848a69d2df59a3d4ba0b86d2d46f969b5c3d6510c1fa584b926ae239102d757fa815bfa5fd86431cf4aed1d4e9ef522ceca6eb2746c03220a09a3e9c3386d719b8154d33d9aabf3c7073527500b6738ab26855898e224773c5956"}, {0x1010, 0x10c, 0xb27, "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"}, {0x20, 0x10b, 0xafc1, '[\x00\x00\x00\x00\x00\x00\x00\x00'}], 0x11e8}, 0x10) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r21, 0x4008240b, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) recvmsg(r18, &(0x7f000000dcc0)={0x0, 0x0, &(0x7f000000db80)=[{&(0x7f000000b9c0)=""/72, 0x48}, {&(0x7f000000ba40)=""/4096, 0x1000}, {0x0}, {&(0x7f000000cb40)=""/51, 0x33}, {&(0x7f000000cb80)=""/4088, 0xff8}], 0x5, &(0x7f000000dc00)=""/129, 0x81}, 0x100) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) 02:30:50 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x100000000802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0xffffff0f00000000, 0x40, &(0x7f00000005c0)=ANY=[], 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0xffffff0f00000000, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="7261777401648f00000000000200000000000000000000000000000000000000020000000300000018030000b0010000b001000000000000b0010000b00100008002000080020000800200008002000080020000030000000000000000000000ffffffffac1e000100000000000000006970366772657461703000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009001b0010000000000000000000000000000000000000000f800726563656e740000000000000000000000000000000000000000000000000000000000000000020073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000290000000000000000009f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055643001be8cecb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000020004e4f545241434b000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000d00000000000000000000000000000000000000000006000434c5553544552495000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000340200000000000000000000000000feffffff"], 0x1) r4 = dup2(r2, r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x70, 0x7, 0x7, 0x1, 0x40, 0x0, 0x5, 0x200, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10001, 0x2, @perf_bp={&(0x7f00000000c0), 0x6}, 0x2000, 0x8, 0x1, 0x5, 0x4, 0x4bf, 0x800}, r4, 0xf, r7, 0x2) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="35d4a7cf18000000629841c900"}, 0x1c) sendmmsg$inet_sctp(r0, &(0x7f0000000100), 0xa0, 0x0) 02:30:50 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x12, r0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes, 0x10ff00}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) timerfd_create(0x0, 0x100800) write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[@ANYRESDEC], 0x14) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000000c0)={0x8, 0x70, 0x14, 0x2, 0x4, 0x46, 0x0, 0x9, 0x40c08, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x175, 0x1, @perf_config_ext={0x5, 0x64}, 0x28a0, 0xffffffffffffff01, 0x7fff, 0x0, 0x4707ebfc, 0x4, 0x4}) [ 329.945534] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 329.978296] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 330.045416] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. 02:30:51 executing program 0: setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x0, 0x0, @local, 0x55}}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000080)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000240), &(0x7f0000000040)=0x68) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7cc8f5e6e538ecf8829b08f7f4aae"}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r5, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', @ifru_flags}) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000100)={0x0, 0xfffffbff}, &(0x7f0000000200)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xd, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 02:30:51 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x100000000802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="35d4a7cf18000000629841c900"}, 0x1c) sendmmsg$inet_sctp(r0, &(0x7f0000000100), 0xa0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0xffffff0f00000000, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1) getresgid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) setsockopt$inet_opts(r2, 0x0, 0x0, &(0x7f00000000c0)="82d6f5b492a5abdee9d7f5814b212e2c064b1488f46bbe35ac1b5fce2d19296cc5d9b8ffd0d743212dca3118d85b056acb7389232a14c4ca7b87ee026ce45f975e40b878f451c1152044cbf6a9528989970b899a300cdbbae27cac581b4b2cc880800bf46a6c191079e9b67739786636d32410e988d453684a0af5dd36379ba1ec8d10320e39d1d24a4ab4ab93931a07e8f2b7176b3df71d6d71cb1ad5c5f3071768e52927e530d40f27f5a3e7c5c7f2bce253ffa2d5175160150e616a46bf61ccd6ca190e6f33cd14d324170bb6859870b7b4b13863d29388bceffa2ef5ff23713ecc99bf1897c76e17c4bca02256cfb80b3edcff", 0xf5) [ 330.202255] audit: type=1400 audit(1581215451.235:124): avc: denied { create } for pid=12269 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 330.282239] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 330.294488] audit: type=1400 audit(1581215451.235:125): avc: denied { getopt } for pid=12269 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 02:30:51 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x100000000802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0xffffff0f00000000, 0x40, &(0x7f00000005c0)=ANY=[], 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0xffffff0f00000000, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1) r4 = dup2(r2, r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x70, 0x7, 0x7, 0x1, 0x40, 0x0, 0x5, 0x200, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10001, 0x2, @perf_bp={&(0x7f00000000c0), 0x6}, 0x2000, 0x8, 0x1, 0x5, 0x4, 0x4bf, 0x800}, r4, 0xf, r7, 0x2) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="35d4a7cf18000000629841c900"}, 0x1c) sendmmsg$inet_sctp(r0, &(0x7f0000000100), 0xa0, 0x0) [ 330.429975] audit: type=1400 audit(1581215451.395:126): avc: denied { ioctl } for pid=12269 comm="syz-executor.0" path="socket:[48273]" dev="sockfs" ino=48273 ioctlcmd=0x4c81 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 02:30:51 executing program 0: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x4, 0x1, 0x0, 0x0, 0x0, {}, ["", "", ""]}, 0x14}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x0, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc004240a, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000140)) socket$inet(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$VFIO_SET_IOMMU(r2, 0x3b66, 0x7) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x5, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700000000000000800000af00", @ANYRES32=0x0, @ANYBLOB="7fff000000000800140012000c0001006d5a63766c616e00a6ff02000a98b07ade577fcadb00000008000a00", @ANYRES32, @ANYBLOB="51e5ec736bf613910d50c86c1ec597ba6b1c3c5743b46c00a9c63a4b89e7a4e25df465cea3acfa42e3719665ce28707f2e62e5685fa45f8d258d358b512c74add39bd41100a55ae54417942c7019e63cbea8e0eb07fe76e9652675ab74703d337e"], 0x48}}, 0x0) r4 = getpid() tkill(r4, 0x9) openat$hwrng(0xffffffffffffff9c, 0x0, 0x10000, 0x0) socket$inet6(0xa, 0x0, 0x0) [ 330.483753] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 330.552200] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 330.596006] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 330.618014] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:30:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x400000, 0x119) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xfdef4640ef813dc9}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYPTR=&(0x7f0000000000)=ANY=[@ANYRES16=r0]], 0x1}, 0x1, 0x0, 0x0, 0x150}, 0x40080) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x27, 0x2, 0x9) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x1c, 0x2, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004085}, 0x40014) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRESDEC], 0x14) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f00000002c0)=""/135) [ 330.647656] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. 02:30:51 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1002, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x28, 0x80000, 0x0) close(r0) r1 = socket$inet6(0xa, 0x100000000802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="35d4a7cf18000000629841c900"}, 0x1c) sendmmsg$inet_sctp(r0, &(0x7f0000000100), 0xa0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0xffffff0f00000000, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) syz_open_dev$binderN(&(0x7f0000001700)='/dev/binder#\x00', 0x0, 0x402) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_SET_XCRS(r5, 0x4188aea7, &(0x7f0000001640)={0x9, 0x800, [{0x80000001, 0x0, 0x7}, {0x1, 0x0, 0x2}, {0x8001, 0x0, 0x1}, {0x78d, 0x0, 0x7}, {0xffffffd6, 0x0, 0x4}, {0x6, 0x0, 0x9}, {0x7, 0x0, 0x400}, {0x3, 0x0, 0x1}, {0x9, 0x0, 0xffffffffffffffa6}]}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f00000002c0)=0xe8) sendmsg$inet6(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x2}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000100)="abde0b92962c17243cd2d0074beea757ba2d36a489bf57d10db508ed573a7f32fd19ec82771f4113af8ddf41d91a2342644db894f64aa06c17346a04b0e72f06a356ed472383b4c2125ef76299139a62b3d37f94ca8be1ca90", 0x59}], 0x1, &(0x7f0000000380)=[@rthdrdstopts={{0x68, 0x29, 0x37, {0x1, 0x9, [], [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0x6, [0xfffffffffffffff8, 0xb0bb, 0x9]}}, @jumbo, @hao={0xc9, 0x10, @local}, @enc_lim={0x4, 0x1, 0xff}, @enc_lim={0x4, 0x1, 0x3}, @pad1]}}}, @rthdr={{0xb8, 0x29, 0x39, {0x84, 0x14, 0x0, 0x0, 0x0, [@mcast1, @local, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @mcast2, @mcast1, @local, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [], 0x38}, @ipv4={[], [], @loopback}, @mcast1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr="2fa575e0402b676e13874c38615d7879", r6}}}, @hopopts={{0xc8, 0x29, 0x36, {0x3a, 0x15, [], [@calipso={0x7, 0x48, {0x0, 0x10, 0x1, 0xffc0, [0xfa, 0x2, 0x7fffffff, 0x9, 0x9, 0x1ff, 0x9, 0x3769]}}, @ra={0x5, 0x2, 0x3ff}, @generic={0xb0, 0x53, "74c17a52cc69ba4a8673f32279b0575500b48d8d3e1a404915d94e76bd41fe7d2972e6fab4726d54e4f82dd793b79168e34a790e06cf450f80952ad9547d40ae81b3682d5ac7c9795528ff21c30b4dcd92060f"}, @jumbo={0xc2, 0x4, 0x80000001}, @jumbo={0xc2, 0x4, 0x1}]}}}, @tclass={{0x14, 0x29, 0x43, 0x80}}, @rthdrdstopts={{0x1048, 0x29, 0x37, {0x5c, 0x206, [], [@ra={0x5, 0x2, 0x100}, @ra={0x5, 0x2, 0xffe0}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x78, 0x1000, "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"}, @calipso={0x7, 0x18, {0x3, 0x4, 0xc1, 0xfffa, [0x9, 0x8]}}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}], 0x1288}, 0x40040) [ 330.735176] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 330.748741] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 330.849145] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 330.944462] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. 02:30:52 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) close(r0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000001600)='macvlan0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000001680)={{{@in6=@ipv4={[], [], @dev}, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f0000001780)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000001940)={@ipv4={[], [], @dev}, 0x0}, &(0x7f0000001980)=0x14) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0xffffff0f00000000, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000019c0)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000001b00)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x98, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKSTATE_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wireguard0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000004}, 0x200408d1) r8 = socket$inet6(0xa, 0x100000000802, 0x0) setsockopt$inet6_buf(r8, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="35d4a7cf18000000629841c900"}, 0x1c) r9 = getpid() sched_setattr(r9, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) process_vm_readv(r9, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/208, 0xd0}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f0000001380)=""/221, 0xdd}, {&(0x7f0000001480)=""/217, 0xd9}], 0x5, &(0x7f0000000300)=[{&(0x7f0000001580)=""/116, 0x74}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000100), 0xa0, 0x0) 02:30:52 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000340)='/dev/video0\x00', 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0xffffff0f00000000, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x2) r3 = accept$netrom(r1, &(0x7f0000000200)={{0x3, @null}, [@default, @default, @netrom, @default, @netrom, @rose, @null, @netrom]}, &(0x7f0000000280)=0x48) fsetxattr$trusted_overlay_opaque(r3, &(0x7f00000002c0)='trusted.overlay.opaque\x00', &(0x7f0000000300)='y\x00', 0x2, 0x1) timer_create(0x0, &(0x7f0000000000), 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x2000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e24, 0xc53, @dev={0xfe, 0x80, [], 0x3a}, 0x101}}, [0x8, 0xcc4, 0x20, 0x20, 0x6, 0x400, 0x3, 0xfffffffffffffdbd, 0x6, 0xffff, 0x2, 0x7, 0x2, 0x1000, 0x81]}, &(0x7f0000000180)=0x100) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000001c0)={r5, 0x40}, 0x8) [ 331.235958] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. 02:30:52 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) r1 = syz_open_dev$swradio(0x0, 0x1, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0xffffff0f00000000, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1) r3 = dup2(r2, r1) mq_timedreceive(r3, &(0x7f0000000000)=""/204, 0xcc, 0x6, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x4000) [ 331.310604] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. 02:30:52 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x100000000802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="35d4a7cf18000000629841c900"}, 0x1c) sendmmsg$inet_sctp(r0, &(0x7f0000000100), 0xa0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x800, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) connect$rose(r0, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x1, @null}, 0x1c) [ 331.381066] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. 02:30:52 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000340)={0x9, 0x400000008d}, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000480)={0x9e0000, 0x401, 0x8001, r0, 0x0, &(0x7f0000000440)={0x9c0903, 0x1ff, [], @p_u32=&(0x7f0000000140)=0xfffffffd}}) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000800)) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000001c40)=[{{&(0x7f0000000600)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000006c0)=""/113, 0x71}, {&(0x7f0000000740)=""/148, 0x94}, {0x0}, {&(0x7f0000000980)=""/153, 0x99}, {0x0}], 0x5, &(0x7f0000001bc0)=""/50, 0x32}}], 0x1, 0x20, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f0000001dc0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xc9, &(0x7f0000000380)=0x8, 0x4) r6 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r6) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000400)={r6, 0xdc, 0x6}, &(0x7f0000001e40)=ANY=[], &(0x7f00000004c0)="1818cfdc1fa23d3347cdf7831b482750759d42423fa9e3bcb3db8aef815b039c734c8baf1e852840737f691d040bd44f5f69f432449f2c6a2e2b13bbbb3b540e97515381718b25a89e81294c972368c72407385bccff1f238b2c86ff72b990dd06a2d80a7ed5fb2796af360af9c6fbd71b623aeb93dc7e0f59ce05455f875f775d90e723ee40987a1b069fef279e6cecfad312858dfe40fa5a9d3633d8f8311b13f94a633856530ba928b435fc27de2e760869bc3ad42b392f543c6c743775b06e29a529642a23667332ecd227e74c6d4a8d3b521aea0c60b1b34ea7", &(0x7f00000001c0)="9870a3625d0e") clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r8 = socket(0x10, 0x803, 0x0) setsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000001c00), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000a40)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@local}}, &(0x7f00000005c0)=0xe8) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r13, 0x0) stat(&(0x7f0000000680)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x1820005, &(0x7f0000000b40)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=r12, @ANYBLOB=',group_id=', @ANYRESDEC=r13, @ANYBLOB="0c626c6b73697a653d30783030303030303030302c626c6b73697a653d307830303030303030303030303030323005000000000000006173682c7065726d69745f646972656374696f2c636f6e746578743d726f6f742c666f776e65723e", @ANYRESDEC=r14, @ANYBLOB=',subj_user=ppp1wlan1~,\x00']) symlink(0x0, &(0x7f00000002c0)='./file0\x00') rt_sigpending(&(0x7f00000003c0), 0x8) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000000)=0x10) 02:30:52 executing program 1: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f00000000c0)={0x101, 0x53a54177, 0xfffffff8, 0xfffffff8, 0x5, 0x100000000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000001400)=';', 0x1) syz_init_net_socket$rose(0xb, 0x5, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000) [ 331.600880] audit: type=1804 audit(1581215452.635:127): pid=12326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir058657422/syzkaller.DZW8AV/11/file0" dev="sda1" ino=17043 res=1 02:30:52 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="7000000000011905030000000040000002000000240001001400010008000100ffffffff08000200ac1e00010c0002000500010000000000240002000c00020005000100000000001400010008000100e00000020800020000000000080007"], 0x1}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYRESDEC], 0x14) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f0000000080)={0x2, 0x6}) r3 = socket$tipc(0x1e, 0x5, 0x0) splice(r3, 0x0, r1, 0x0, 0x4ffe0, 0x0) 02:30:52 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x100000000802, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000100)={0x3ff, 0x3, 0x4, 0x8, 0x3, {r2, r3/1000+30000}, {0x5, 0x1, 0x81, 0x3, 0x81, 0x9c, "5d1baa0d"}, 0x9, 0x2, @offset=0x4, 0xf2, 0x0, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r5, 0x100, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffa}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4048001}, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="35d4a7cf18000000629841c900"}, 0x1c) sendmmsg$inet_sctp(r0, &(0x7f0000000100), 0xa0, 0x0) 02:30:53 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x100000000802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) r2 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x26000) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r4, 0x0) write$FUSE_ATTR(r2, &(0x7f00000001c0)={0x78, 0x0, 0xecfe, {0x3f, 0x400, 0x0, {0x5, 0x2929, 0x2, 0xd6, 0x2, 0x6, 0x0, 0x3ff, 0x2, 0x3ff, 0x168, r3, r4, 0x80000001, 0x4000000}}}, 0x78) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="35d4a7cf18000000629841c900"}, 0x1c) sendmmsg$inet_sctp(r0, &(0x7f0000000100), 0xa0, 0x0) [ 332.339475] audit: type=1804 audit(1581215453.365:128): pid=12344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir058657422/syzkaller.DZW8AV/11/file0" dev="sda1" ino=17043 res=1 02:30:53 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x100000000802, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000100)={0x3ff, 0x3, 0x4, 0x8, 0x3, {r2, r3/1000+30000}, {0x5, 0x1, 0x81, 0x3, 0x81, 0x9c, "5d1baa0d"}, 0x9, 0x2, @offset=0x4, 0xf2, 0x0, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r5, 0x100, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffa}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4048001}, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="35d4a7cf18000000629841c900"}, 0x1c) sendmmsg$inet_sctp(r0, &(0x7f0000000100), 0xa0, 0x0) 02:30:53 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x100000000802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="35d4a7cf18000000629841c900"}, 0x1c) sendmmsg$inet_sctp(r0, &(0x7f0000000100), 0xa0, 0x0) 02:30:53 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_tcp(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000200)={'trans=tcp,', {'port'}}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) open(0x0, 0x0, 0x0) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='timerslack_ns\x00') r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0xffffff0f00000000, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000140)=0x3) pipe(&(0x7f0000000200)={0xffffffffffffffff}) splice(r6, 0x0, r4, 0x0, 0x81420000a77, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0x80045530, &(0x7f0000000100)) read$eventfd(r3, &(0x7f0000000080), 0x8) socket$inet_udp(0x2, 0x2, 0x0) [ 332.599156] 9pnet: p9_fd_create_tcp (12355): problem connecting socket to 127.0.0.1 [ 332.620581] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. 02:30:53 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="ac0000000001190500000000000000e4090000003c0001002c0001001400030016f8bcd3832f9b1577def13edad6b8bf14000400fe8000000000000000000000000000bb0c00020005000100000000003c0002000c00020005000100000000002c00010014000300fe880000000000000000000000000001140004000001000000000000000000000000000108000700000000001800060014000500fe88000000000000000000000000000133d3b8dc7dc04634d83f595f16b96340ef8e18d7388838203608e5c7821f0e47f07f840aa48a933e7511db098eb6989c620404c65f"], 0xac}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='timerslack_ns\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x81420000a77, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r5 = getuid() r6 = getgid() r7 = getpid() sched_setattr(r7, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@empty}}, &(0x7f0000000180)=0xe8) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r9, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0xffffff0f00000000, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="7261777401648f00000000000200000000000000000000000000000000000000020000000300000018030000b0010000b001000000000000b0010000b00100008002000080020000800200008002000080020000030000000000000000000000ffffffffac1e000100000000000000006970366772657461703000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009001b0010000000000000000000000000000000000000000f800726563656e740000000000000000000000000000000000000000000000000000000000000000020073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000290000000000000000009f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055643001be8cecb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000020004e4f545241434b000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000d00000000000000000000000000000000000000000006000434c5553544552495000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000340200000000000000000000000000feffffff"], 0x1) r11 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r12, 0xffffff0f00000000, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1) r13 = syz_open_procfs(0x0, &(0x7f0000000100)='timerslack_ns\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) splice(r14, 0x0, r13, 0x0, 0x81420000a77, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r13, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@loopback, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f00000004c0)=0xe8) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r16, 0x0) r17 = getpid() sched_setattr(r17, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r18 = getpid() sched_setattr(r18, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000500)={0xfffffffe, 0x1b1, {r18}, {0xee00}, 0x1ff, 0xc610}) r20 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r20, 0xffffff0f00000000, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="7261777401648f00000000000200000000000000000000000000000000000000020000000300000018030000b0010000b001000000000000b0010000b00100008002000080020000800200008002000080020000030000000000000000000000ffffffffac1e000100000000000000006970366772657461703000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009001b0010000000000000000000000000000000000000000f800726563656e740000000000000000000000000000000000000000000000000000000000000000020073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000290000000000000000009f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055643001be8cecb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000020004e4f545241434b000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000d00000000000000000000000000000000000000000006000434c5553544552495000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000340200000000000000000000000000feffffff"], 0x1) r21 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r21, 0xffffff0f00000000, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1) r22 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r22, 0xffffff0f00000000, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1) r23 = getpid() sched_setattr(r23, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r24 = syz_open_procfs$namespace(r23, &(0x7f0000000540)='ns/ipc\x00') r25 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r25, 0xffffff0f00000000, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1) r26 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r26, 0xffffff0f00000000, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1) r27 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r27, 0xffffff0f00000000, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1) r28 = fcntl$getown(0xffffffffffffffff, 0x9) getresuid(&(0x7f0000000580), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r30, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r31, 0x0) getgroups(0x3, &(0x7f00000017c0)=[r30, r31, 0xffffffffffffffff]) sendmsg$netlink(r2, &(0x7f0000001940)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000000}, 0xc, &(0x7f0000000040)=[{&(0x7f0000000680)={0x1118, 0x10, 0x1, 0x70bd2a, 0x25dfdbff, "", [@nested={0x10e0, 0x81, 0x0, 0x1, [@generic="757f0aa2c68222318dd58308f4a14be9fa213a532c583af1d58a5ee7eff0a6984f2be2ff9b026b9331114951eeb6f73f9f1a0627e7672d37c7757c7b336a42bd879689ce9ed7a7ae7792ca252ae8a844984cf0c3608ce6ce28bd19f3d4eee7ec9f060570e74187f39d5d87ca07b1f8ed942ea745ff11c12bec4215086784e4cdaf13", @typed={0x14, 0x26, 0x0, 0x0, @ipv6=@mcast1}, @generic="f3f4fd296042b8aa789d8c994b4d376b50308051f0f832765e9ae7fc7bde8aecd0da", @generic="a4d0c0df1a318dfe902d9fc3256d8df8c3cb458f45ab3c06ab402627cba9e06ea87a2646", @generic="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"]}, @typed={0x27, 0x2a, 0x0, 0x0, @binary="d880249bafe8f776802097f04e25c7bc4a789f7c9b86db464658e9a23df3b206b83747"}]}, 0x1118}], 0x1, &(0x7f0000001800)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @rights={{0x28, 0x1, 0x1, [r10, r1, r1, r11, r12, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r15, r16}}}, @cred={{0x1c, 0x1, 0x2, {r17, r19, 0xee00}}}, @rights={{0x34, 0x1, 0x1, [r20, 0xffffffffffffffff, r21, r22, r0, r24, r25, r26, r0]}}, @rights={{0x24, 0x1, 0x1, [r1, r27, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r32}}}], 0x128, 0x20004001}, 0x400c000) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8, 0x6800}, 0x0) acct(0x0) 02:30:53 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x100000000802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="35d4a7cf18000000629841c900"}, 0x1c) sendmmsg$inet_sctp(r0, &(0x7f0000000100), 0xa0, 0x0) 02:30:53 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYRESDEC], 0x14) ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000200)={0x30, "818b674ea967e92f5b65ea128c5402e20e890c61d27890384dd11194d223af05c726a7d39253cbccc858b9b74dec2f7576ea4bf88e61da386128dfd8f833b658bdb4994d566f45b16f4f0737047ee3580baae2a0541375ff034018271710f33e7e0afb29b024f4139952ec6a76946a5e23f3ec7b1c7dc354172c3f3091ffdf5f"}) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000002, 0x20010, r0, 0x36afe000) recvmmsg(r1, &(0x7f00000004c0), 0x7ffffffffffff92, 0x0, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) r4 = shmat(0x0, &(0x7f0000ff6000/0x4000)=nil, 0x6ffd) shmdt(r4) shmdt(r4) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000180)={{0x84, @local, 0x4e22, 0x4, 'ovf\x00', 0x28, 0x1f, 0x3}, {@loopback, 0x4e20, 0x1, 0x1, 0x5882, 0x9}}, 0x44) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) [ 332.891201] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 332.923186] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. 02:30:54 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac623ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a92825a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x104eb, 0x8, 0x0, 0xffffffffffffff1a) r1 = socket$inet(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000b773fcd7375822d16c8a255b438594e1d3c0670cce0028355540a2b071365dc5e6d6b6b111363f9a3b35e5d5bcc48589ce93fece571e404793ed268b8041a5dd898afb2442f9195ea1726966e4f7af5132e0a10676efa410f2c51ca92acc003f9cb27af7bf74776704081306a1645e3e", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x14, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000380)={r5, 0x2, 0x54, 0x7fffffff}, 0x10) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r5, 0x6}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000180)={r6, 0x1}, &(0x7f00000001c0)=0x8) r7 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x5, 0x22c82) setsockopt$sock_timeval(r7, 0x1, 0x15, &(0x7f0000000080), 0x10) r8 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x380000, @empty}, 0x1c) [ 332.996485] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 333.053228] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 333.098550] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 333.124585] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 333.168536] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 333.193021] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. 02:30:54 executing program 0: unshare(0x20020000) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0xffffff0f00000000, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c0100010000000000", @ANYRES32=r1, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) rmdir(&(0x7f00000000c0)='./file0\x00') getpeername$netrom(r4, &(0x7f0000000100)={{0x3, @netrom}, [@bcast, @remote, @rose, @netrom, @netrom, @null, @default, @default]}, &(0x7f0000000000)=0x48) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000340)={0x80, 0x7, "85d984b202c55fdd43d536920afe719ca06e5432466eb86421adc1c4046842454154086efd4138d469e3aea8b258c6b2cb1444c7b2e3043321c86816c4801f42dfc30bc219701de4bcf73d38e2639e933f57c37950bc7df06bfa01724339511291f05b8ef108c2b09f82727d0eb1b878c9e673cf67534f22a3d39e53507db82fab5559c54789f54d20289e87b377f1796cf54812fdd8d3771834b8ee0428c40b9d8c85c0814654d23de749914a8327d55d8870f9bd082776946f0d239f27b157c5b0850082080eda0856ba3f5f96628e87be63026a93d7d12fd867a68f41329c9e29348674936f3fe4d81577650e9cded09930f00695ed518d7f4e9f857bf173"}) [ 333.238755] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 333.319958] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. 02:30:54 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x100000000802, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0xffffff0f00000000, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="7261777401648f00000000000200000000000000000000000000000000000000020000000300000018030000b0010000b001000000000000b0010000b00100008002000080020000800200008002000080020000030000000000000000000000ffffffffac1e000100000000000000006970366772657461703000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009001b0010000000000000000000000000000000000000000f800726563656e740000000000000000000000000000000000000000000000000000000000000000020073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000290000000000000000009f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055643001be8cecb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000020004e4f545241434b000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000d00000000000000000000000000000000000000000006000434c5553544552495000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000340200000000000000000000000000feffffff"], 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0xffffff0f00000000, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1) r4 = fcntl$dupfd(r2, 0x406, r3) r5 = socket$inet(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r6 = socket$inet(0x2, 0x4000000805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = dup3(r6, r7, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r8, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x14, &(0x7f000059aff8)={r9}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000380)={r9, 0x2, 0x54, 0x7fffffff}, 0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000000c0)={r9, 0x6}, 0x8) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="35d4a7cf18000000629841c900"}, 0x1c) sendmmsg$inet_sctp(r0, &(0x7f0000000100), 0xa0, 0x0) [ 333.384657] 9pnet: p9_fd_create_tcp (12358): problem connecting socket to 127.0.0.1 [ 333.398389] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 333.448825] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 333.463001] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. 02:30:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9a4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x2) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) r3 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r3, 0x80045700, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x1) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x2044c1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r4, 0x0, 0x0, 0x0}, 0x30) pipe(0x0) fcntl$lock(0xffffffffffffffff, 0x10000000000025, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x43b}) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) [ 333.519165] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 333.521159] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. 02:30:54 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x100000000802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='timerslack_ns\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x81420000a77, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f00000000c0)=@srh={0x2f, 0x10, 0x4, 0x8, 0x7f, 0x10, 0x20, [@loopback, @dev={0xfe, 0x80, [], 0x3d}, @empty, @ipv4={[], [], @local}, @ipv4={[], [], @broadcast}, @empty, @mcast1, @empty]}, 0x88) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="35d4a7cf18000000629841c900"}, 0x1c) sendmmsg$inet_sctp(r0, &(0x7f0000000100), 0xa0, 0x0) [ 333.607467] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. 02:30:54 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x100000000802, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0xffffff0f00000000, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0xffffff0f00000000, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1) r4 = fcntl$dupfd(r2, 0x406, r3) r5 = socket$inet(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r6 = socket$inet(0x2, 0x4000000805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = dup3(r6, r7, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r8, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x14, &(0x7f000059aff8)={r9}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000380)={r9, 0x2, 0x54, 0x7fffffff}, 0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000000c0)={r9, 0x6}, 0x8) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="35d4a7cf18000000629841c900"}, 0x1c) sendmmsg$inet_sctp(r0, &(0x7f0000000100), 0xa0, 0x0) [ 333.776524] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 333.790352] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 333.804054] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 333.811130] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 333.822036] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 333.843624] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 333.853322] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. 02:30:54 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRESDEC], 0x14) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000)=0xfffffff7, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x1f00, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0xfdffffff00000000}, 0x0) [ 333.872826] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 333.882286] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. 02:30:54 executing program 4: symlink(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='./file0\x00') lsetxattr$trusted_overlay_upper(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unlink(&(0x7f0000000040)='./file0\x00') 02:30:55 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg(r4, &(0x7f0000000480)={&(0x7f00000001c0)=@pppoe={0x18, 0x0, {0x4, @random="4dad166156f1", 'ip6_vti0\x00'}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000380)="1f787dddb841c6a93f493528a1e457e0f1dd8535b46b55f0919e8b30db035772f7f1142d00110d7fbc945421cc8213b0be66a0aad8827748e6e6436eab79cab051a4fc3f9b47761da830f4e61c98a667864ffb4d80346d448a4f3c7f77319cc762cdc172d9c8e8e935df5138178e94c3e460b20bdc1af4330595304bba5bf4ee95476040b6e4c4b12bbf60ce9be38e78550cbcc3e6f9669d9a2a3c2adef6153f1a29f47b64ff8cd3768234f3be0e7ea73c4d9e76aec1c8db325790f817bc2f7cb3d0bfa1ea4e", 0xc6}, {&(0x7f0000000500)="e862ac52750baf3c48b6d9fd4ca47d378ecc5ea36503c39201e8e13eb959f77b5f3878fcb26269922074e3e650bfe4a4e1605746c9c3e1c40d86a8e1e8ea7b3d8f3715faba515daefbb9dda8705805a3b6127457c09d6c4117e3ffb22fd57cc8c12a336af97402625cc96f4ac94eda77c9906cbd4791e7693e51964ed7ef38e42fdd336c1a17b97ec21a25e826ec02db6983bd91e161c1f90de4e4bf3274d5e35325ae4d1a4559ab58f35688660b17f14c59775f535e849235a8f436617372b3aea7d36ec020d19727946673ce1515306d85259627f83ec2d99d5a6a8f759ce9994de2e48c", 0xe5}], 0x2}, 0x4000000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x72) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x20000, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r6, &(0x7f0000000080)=ANY=[@ANYRESDEC], 0x14) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) r7 = memfd_create(&(0x7f0000000340)=',\r\xfc\x88\xa8\x1d\xc9_\x19\xca\x03\x00\x00\x1a\xcf\xd2\x00\x00\x00c\xb6\x01\xae\xe6\xbfS\\K(G\xb7\xbf`w\x9f\x00'/53, 0x2) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r9 = accept$alg(r8, 0x0, 0x0) sendmmsg(r9, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) write$binfmt_elf32(r9, &(0x7f00000002c0)=ANY=[@ANYBLOB="7d7f0f011df882d2454c460000010000000000070000006e000300000017482632f1aaf1a280000000bb00000038000000fcffffff000000000000200800000000010000000300"/97], 0x58) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) memfd_create(&(0x7f0000000640)='\x00\x04\x00\x00', 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) 02:30:55 executing program 4: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r1, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window={0x3, 0x0, 0x40}, @window={0x3, 0x9, 0x5}], 0x8e) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x13, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x3d, &(0x7f0000000200), &(0x7f0000000240)) r4 = dup2(r3, r3) r5 = openat(r4, &(0x7f00000002c0)='./file0\x00', 0x228000, 0x78) getdents64(r5, &(0x7f0000000240)=""/65, 0x18) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000440)={0x9e0000, 0xa757, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x10075, 0x56, [], @ptr=0x7}}) bind$pptp(r6, &(0x7f00000001c0)={0x18, 0x2, {0x0, @rand_addr=0x8}}, 0x1e) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0008001bdeff030080fdff00"], 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 02:30:55 executing program 5: clone(0x84c080, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2b8, 0x148, 0x0, 0x148, 0x0, 0x0, 0x220, 0x220, 0x220, 0x220, 0x220, 0x3, 0x0, {[{{@uncond, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x3226f97c, 0x1}}, @common=@icmp={{0x28, 'icmp\x00'}, {0x0, "11ef"}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x318) [ 334.118457] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. 02:30:55 executing program 0: mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x20032, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') 02:30:55 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 334.361398] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 02:30:55 executing program 4: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r1, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window={0x3, 0x0, 0x40}, @window={0x3, 0x9, 0x5}], 0x8e) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x13, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x3d, &(0x7f0000000200), &(0x7f0000000240)) r4 = dup2(r3, r3) r5 = openat(r4, &(0x7f00000002c0)='./file0\x00', 0x228000, 0x78) getdents64(r5, &(0x7f0000000240)=""/65, 0x18) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000440)={0x9e0000, 0xa757, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x10075, 0x56, [], @ptr=0x7}}) bind$pptp(r6, &(0x7f00000001c0)={0x18, 0x2, {0x0, @rand_addr=0x8}}, 0x1e) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0008001bdeff030080fdff00"], 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 334.444322] x_tables: ip_tables: icmp match: only valid for protocol 1 02:30:55 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) close(r0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000000c0)=0x9, 0x4) r1 = socket$inet6(0xa, 0x100000000802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="35d4a7cf18000000629841c900"}, 0x1c) sendmmsg$inet_sctp(r0, &(0x7f0000000100), 0xa0, 0x0) [ 334.623012] audit: type=1400 audit(1581215455.655:129): avc: denied { map } for pid=12438 comm="syz-executor.1" path="/root/syzkaller-testdir058657422/syzkaller.DZW8AV/17/file0/memory.events" dev="loop1" ino=11 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:dosfs_t:s0 tclass=file permissive=1 02:30:55 executing program 0: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r1, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="feff8e3d94bddf0a9038d00d5873ea94b080374007242f79399a169a7f15919be87aeaa6f8a2a5f2ddd056c541ae4d207b728518e0577d7ad6c882d0316ede12e8bf0e36f56f6a85f565c55a00d2d3bdcac52f68e1dc6591ed99038eeb64128991db28631fe311be9ffd0c2ec24250df97fcbd8a8643e7e9f3d9af21673bc8fb4fbec843e041f3c26bd232acf4e8f635b3b4f82015cfcd0455e1d1932530511e0fc274c285f6b22eba06aed2dc97c91e7784205ff30f493f3c2ffbf572000000005b07085ed7790b911ec638c4ca5c0ead8a52d0b23d3f9958e6b635336dc2a9e853df6af0b02515463f90e9160ad3a9f80cab8655bf81de307117d0b213cc419f54d2d4071a3b165669b06f4f6fe27369629b5ff312f2902f6d4bb4a77db58bc16f04fce555a3e00b573f5a7850644c2027d61eab564c50541972d48baf098cd021b6112e564ef0129fd8382473f0575e264b1b98d625cb9a99b1e12fe8f3885fe6b752"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window={0x3, 0x0, 0x40}, @window={0x3, 0x9, 0x5}], 0x8e) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x13, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x3d, &(0x7f0000000200), &(0x7f0000000240)) r4 = dup2(r3, r3) r5 = openat(r4, &(0x7f00000002c0)='./file0\x00', 0x228000, 0x78) getdents64(r5, &(0x7f0000000240)=""/65, 0x18) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000440)={0x9e0000, 0xa757, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x10075, 0x56, [], @ptr=0x7}}) bind$pptp(r6, &(0x7f00000001c0)={0x18, 0x2, {0x0, @rand_addr=0x8}}, 0x1e) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0008001bdeff030080fdff00"], 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 334.666096] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF 02:30:55 executing program 4: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r1, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="feff8e3d94bddf0a9038d00d5873ea94b080374007242f79399a169a7f15919be87aeaa6f8a2a5f2ddd056c541ae4d207b728518e0577d7ad6c882d0316ede12e8bf0e36f56f6a85f565c55a00d2d3bdcac52f68e1dc6591ed99038eeb64128991db28631fe311be9ffd0c2ec24250df97fcbd8a8643e7e9f3d9af21673bc8fb4fbec843e041f3c26bd232acf4e8f635b3b4f82015cfcd0455e1d1932530511e0fc274c285f6b22eba06aed2dc97c91e7784205ff30f493f3c2ffbf572000000005b07085ed7790b911ec638c4ca5c0ead8a52d0b23d3f9958e6b635336dc2a9e853df6af0b02515463f90e9160ad3a9f80cab8655bf81de307117d0b213cc419f54d2d4071a3b165669b06f4f6fe27369629b5ff312f2902f6d4bb4a77db58bc16f04fce555a3e00b573f5a7850644c2027d61eab564c50541972d48baf098cd021b6112e564ef0129fd8382473f0575e264b1b98d625cb9a99b1e12fe8f3885fe6b752"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window={0x3, 0x0, 0x40}, @window={0x3, 0x9, 0x5}], 0x8e) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x13, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x3d, &(0x7f0000000200), &(0x7f0000000240)) r4 = dup2(r3, r3) r5 = openat(r4, &(0x7f00000002c0)='./file0\x00', 0x228000, 0x78) getdents64(r5, &(0x7f0000000240)=""/65, 0x18) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000440)={0x9e0000, 0xa757, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x10075, 0x56, [], @ptr=0x7}}) bind$pptp(r6, &(0x7f00000001c0)={0x18, 0x2, {0x0, @rand_addr=0x8}}, 0x1e) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0008001bdeff030080fdff00"], 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 334.705742] FAT-fs (loop1): Filesystem has been set read-only 02:30:55 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:30:55 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0xffffff0f00000000, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="7261777401648f00000000000200000000000000000000000000000000000000020000000300000018030000b0010000b001000000000000b0010000b00100008002000080020000800200008002000080020000030000000000000000000000ffffffffac1e000100000000000000006970366772657461703000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009001b0010000000000000000000000000000000000000000f800726563656e740000000000000000000000000000000000000000000000000000000000000000020073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000290000000000000000009f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055643001be8cecb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000020004e4f545241434b000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000d00000000000000000000000000000000000000000006000434c5553544552495000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000340200000000000000000000000000feffffff"], 0x1) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRES16=r0]], 0x17) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0x0, 0x10, r0, 0xcc1bbedb4bffb887) r2 = socket(0xa, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x100000000802, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="35d4a7cf18000000629841c900"}, 0x1c) sendmmsg$inet_sctp(r2, &(0x7f0000000100), 0xa0, 0x0) [ 334.918283] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 02:30:56 executing program 4: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r1, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window={0x3, 0x0, 0x40}, @window={0x3, 0x9, 0x5}], 0x8e) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x13, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[@ANYBLOB="160690cb39bca59f8c4064ac6d183b7b242060a07bc4309e3e4912bd5a797b308e38f55f57c55f380d17eb11c751b2458cb5820875db81d255eea402f1c11ca7fc019642eb9ed6ef4e80bc67cba7e7fe961fe5d91f442b0a06b135f8a73b68dc904b436f256f50ae7cb980a911094113224ee69e7580b9f11c6ede1610f23240559b8c427000d7ce7862417ab5a50e494b2a54e346d7ffa008ccef06813e235b446788ac0000000000000001d3364a2efd284640ec00080000000092a90c4db9cd1531143fe369c3a1e320f43054fdb4c79363270cdcbc4c4ce0e17f04e3ca8bc5c1299c6810e96aadd4dc973657ebf0b716f876fb7be8e09e2a66da408a726e8274e9da958609600400000000000000d49aa49daf479fdc000000000000000000000000000000000000000000000000002f3205be8142ed8bed8703e7ad2f8210aa0c1711cb90b18d18253749252821fd723dec6149fdc18fdf8ee55124d62af4278cb0b82dd4002df2b5d432769776ed9a7d629ca4a22d58d6d2f33b58491cca7f2468ea23308b5f6d01791dded655e8f11d4db8e5ecb7b05b3b47a95fa3c5c3eb202fa27e70baf4de4330bd82878797e7b3d61816e9e8c5fbf7291abe95d55825e8564fe6a0f5363b0f365d5baaff6178781573a4f8d2aa5455a4de5e0c8a86f0aca7dfa96fe094947483e7712e45d7beb3c80274bb7943b43530de845f3d3de0f29d7baa4f17ea2dfaf70cc9dd9a1571945f"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x3d, &(0x7f0000000200), &(0x7f0000000240)) r4 = dup2(r3, r3) r5 = openat(r4, &(0x7f00000002c0)='./file0\x00', 0x228000, 0x78) getdents64(r5, &(0x7f0000000240)=""/65, 0x18) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000440)={0x9e0000, 0xa757, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x10075, 0x56, [], @ptr=0x7}}) bind$pptp(r6, &(0x7f00000001c0)={0x18, 0x2, {0x0, @rand_addr=0x8}}, 0x1e) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0008001bdeff030080fdff00"], 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 334.964620] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 335.009969] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. 02:30:56 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x101080, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket(0xa, 0x2, 0x0) close(r1) r2 = socket$inet6(0xa, 0x100000000802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="35d4a7cf18000000629841c900"}, 0x1c) sendmmsg$inet_sctp(r1, &(0x7f0000000100), 0xa0, 0x0) 02:30:56 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0x380c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xf000, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e000000631477fbac141440e0", 0x0, 0x9}, 0x28) socket$kcm(0xa, 0xac296693ba95fb78, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) symlink(0x0, 0x0) getpid() waitid(0x3, 0x0, 0x0, 0x1000000, &(0x7f0000000440)) pipe(&(0x7f0000000840)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0) socket$kcm(0x10, 0x0, 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 335.171153] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 335.193102] FAT-fs (loop1): Filesystem has been set read-only 02:30:56 executing program 5: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$int_out(r0, 0x0, &(0x7f0000000140)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@rand_addr="d231c604669ca416cd68b688abe2081b", 0xba, 0x2, 0x1, 0x5, 0x3, 0x6}, 0x20) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp, 0x20000, 0x0, 0x0, 0x8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000002740)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f00000001c0)={0x0, 0x80000000, 0x3f, [], &(0x7f0000000180)=0x6}) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) 02:30:56 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:30:56 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x100000000801, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0xffffff0f00000000, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, [], [{0x100, 0x0, 0x3, 0x100000000, 0x9, 0x6}, {0x101, 0x1, 0xffffffffffffffda, 0x0, 0x40, 0x1}], [[], [], [], []]}) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="35d4a7cf18000000629841c900"}, 0x1c) sendmmsg$inet_sctp(r0, &(0x7f0000000100), 0xa0, 0x0) 02:30:56 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x10000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x80000000, 0xffffffffffffffff}, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x401, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="eceaf31d4391fde9c36698a71d51000000", @ANYRES16=0x0, @ANYBLOB="040028bd7000fddbdf250d000000440001800800080001000000060004004e2200000c0007001e0000001000000008000b007369700008000b007369700006000200040000000a0006006c626c637200000024000180070006006468000008000b0073697000080008000002000008000600736564004c00018008000500020000000800050004000000080008001d0000001400030000000000000000000000ffffe0000002060001000a000000060001000a0000000c000700080000001000000008000600090000001c00038008000500ac1414aa08000500000000000500080020000000"], 0xec}, 0x1, 0x0, 0x0, 0x140}, 0x4000c91) [ 335.350888] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 335.462186] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. 02:30:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000080)=ANY=[@ANYRESDEC], 0x14) accept4$x25(r5, &(0x7f0000000140), &(0x7f0000000240)=0x12, 0x100000) syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0xc0200) r6 = fcntl$dupfd(r3, 0x0, r4) nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB], 0x44}}, 0x0) [ 335.542221] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. 02:30:56 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0xffffff0f00000000, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="7261777401648f00000000000200000000000000000000000000000000000000020000000300000018030000b0010000b001000000000000b0010000b00100008002000080020000800200008002000080020000030000000000000000000000ffffffffac1e000100000000000000006970366772657461703000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009001b0010000000000000000000000000000000000000000f800726563656e740000000000000000000000000000000000000000000000000000000000000000020073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000290000000000000000009f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055643001be8cecb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000020004e4f545241434b000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000d00000000000000000000000000000000000000000006000434c5553544552495000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000340200000000000000000000000000feffffff"], 0x1) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f00000000c0)) r1 = socket(0xa, 0x2, 0x0) close(r1) r2 = socket$inet6(0xa, 0x100000000802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="35d4a7cf18000000629841c900"}, 0x1c) sendmmsg$inet_sctp(r1, &(0x7f0000000100), 0xa0, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) [ 335.656937] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 335.695596] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 335.804570] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. 02:30:56 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) close(r0) mbind(&(0x7f0000ff5000/0xa000)=nil, 0xa000, 0x3, &(0x7f00000000c0)=0x80000000, 0x8, 0x4) r1 = socket$inet6(0xa, 0x100000000802, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0xffffff0f00000000, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1) flock(r2, 0xf) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="35d4a7cf18000000629841c900"}, 0x1c) sendmmsg$inet_sctp(r0, &(0x7f0000000100), 0xa0, 0x0) [ 335.988049] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 336.073929] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. 02:30:57 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x100000000802, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac623ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a92825a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x104eb, 0x8, 0x0, 0xffffffffffffff1a) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f00000000c0)=@gcm_128={{0x303}, "6457d1e614c93347", "c54222ad00cdbfd24b8c1426d854bf7b", "8728be05", "5f755e014db159a5"}, 0x28) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="35d4a7cf18000000629841c900"}, 0x1c) socket$vsock_dgram(0x28, 0x2, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000100), 0xa0, 0x0) 02:30:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 339.069623] audit: type=1400 audit(1581215460.095:130): avc: denied { map } for pid=12522 comm="syz-executor.4" path="/sys/kernel/debug/kcov" dev="debugfs" ino=1108 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 339.380975] IPVS: ftp: loaded support on port[0] = 21 [ 340.211799] IPVS: ftp: loaded support on port[0] = 21 [ 340.245200] chnl_net:caif_netlink_parms(): no params data found [ 340.361719] chnl_net:caif_netlink_parms(): no params data found [ 340.381698] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.388105] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.395630] device bridge_slave_0 entered promiscuous mode [ 340.407874] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.414349] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.421730] device bridge_slave_1 entered promiscuous mode [ 340.443617] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 340.453019] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 340.480706] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 340.487861] team0: Port device team_slave_0 added [ 340.494131] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 340.501277] team0: Port device team_slave_1 added [ 340.520242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.526505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.552175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.566756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.573159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.598388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.609130] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 340.621945] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 340.637150] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.643610] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.651101] device bridge_slave_0 entered promiscuous mode [ 340.662669] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.669051] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.676164] device bridge_slave_1 entered promiscuous mode [ 340.735428] device hsr_slave_0 entered promiscuous mode [ 340.780516] device hsr_slave_1 entered promiscuous mode [ 340.821923] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 340.829777] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 340.837818] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 340.853002] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 340.872530] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 340.879766] team0: Port device team_slave_0 added [ 340.885808] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 340.893837] team0: Port device team_slave_1 added [ 340.925909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.932231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.958636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.972721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.978970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.004374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.017934] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 341.025776] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 341.092521] device hsr_slave_0 entered promiscuous mode [ 341.130451] device hsr_slave_1 entered promiscuous mode [ 341.175714] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 341.183265] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 341.266964] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.273385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.279979] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.286355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.298873] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.305926] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.324025] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 341.377899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.388441] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 341.396953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.407346] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 341.416396] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 341.426199] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 341.432538] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.439484] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 341.449648] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 341.455822] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.462023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 341.468913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 341.476092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 341.483179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 341.494049] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 341.502732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 341.510897] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 341.518459] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.524821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.535070] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 341.542173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 341.549900] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 341.557789] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.564134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.573097] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 341.582268] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 341.594182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 341.601982] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 341.609485] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.615917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.625790] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 341.634290] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 341.646392] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 341.653653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 341.661864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 341.669615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 341.677361] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.683742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.691604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 341.701621] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 341.710643] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 341.718004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 341.726460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 341.734117] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 341.742720] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 341.752717] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 341.763382] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 341.772027] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 341.778980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 341.786932] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 341.795462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 341.803436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 341.811399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 341.822372] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 341.830752] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 341.837920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 341.846327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 341.854191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 341.861829] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 341.869325] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 341.879580] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 341.887206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 341.895508] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 341.904890] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 341.911365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 341.923693] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 341.931396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 341.938983] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 341.951872] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 341.961326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 341.968844] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 341.978675] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 341.985052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 341.994779] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 342.006816] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 342.013647] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 342.023406] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 342.035437] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 342.044096] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 342.051251] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 342.057919] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 342.067239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.079615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.161425] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 342.172837] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 342.179912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 342.189394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 342.202017] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 342.213715] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 342.221320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 342.229735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 342.264061] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 342.271649] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 342.278303] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 342.289165] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 342.296161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 342.304165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 342.313936] device veth0_vlan entered promiscuous mode [ 342.322321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 342.329236] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 342.340908] device veth1_vlan entered promiscuous mode [ 342.351680] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 342.358791] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 342.365687] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 342.375671] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 342.383147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 342.391247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 342.398999] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 342.406400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 342.416963] device veth0_vlan entered promiscuous mode [ 342.429390] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 342.437894] device veth1_vlan entered promiscuous mode [ 342.446796] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 342.457234] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 342.465735] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 342.479974] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 342.487211] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 342.497381] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 342.504794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 342.512725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 342.522815] device veth0_macvtap entered promiscuous mode [ 342.528947] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 342.539444] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 342.547151] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 342.555034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 342.562954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 342.573612] device veth1_macvtap entered promiscuous mode [ 342.579740] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 342.592990] device veth0_macvtap entered promiscuous mode [ 342.599083] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 342.633738] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 342.645832] device veth1_macvtap entered promiscuous mode [ 342.654616] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 342.665927] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 342.676655] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 342.686866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 342.697184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.706549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 342.716689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.726058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 342.736032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.745260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 342.755060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.764318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 342.774381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.783596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 342.793783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.803952] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 342.811162] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.821366] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 342.829122] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 342.836491] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 342.844144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 342.851718] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 342.859950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 342.874003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 342.884774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.894101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 342.904194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.913334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 342.923467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.932610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 342.942652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.951876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 342.961921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.971433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 342.981486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.990657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 343.000729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.011195] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 343.018170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.027225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 343.038142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.047716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 343.057516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.066664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 343.076479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.085646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 343.095701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.104919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 343.115216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.124437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 343.134185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.144218] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 343.151239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.158861] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 343.168587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 343.176746] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 343.184744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 343.195439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 343.205974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.215429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 343.225447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.235065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 343.244797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.254239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 343.264149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.273371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 343.283120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.292271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 343.302164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.311317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 343.321081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.331463] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 343.338431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.350559] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 343.358533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 344.694361] FAT-fs (loop0): Directory bread(block 2) failed [ 344.700457] FAT-fs (loop0): Directory bread(block 3) failed [ 344.706296] FAT-fs (loop0): Directory bread(block 4) failed [ 344.713212] FAT-fs (loop0): Directory bread(block 5) failed [ 344.718956] FAT-fs (loop0): Directory bread(block 6) failed [ 344.719101] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 344.728899] FAT-fs (loop0): Directory bread(block 7) failed [ 344.729039] FAT-fs (loop0): Directory bread(block 8) failed [ 344.729057] FAT-fs (loop0): Directory bread(block 9) failed [ 344.729080] FAT-fs (loop0): Directory bread(block 10) failed [ 344.729096] FAT-fs (loop0): Directory bread(block 11) failed 02:31:05 executing program 4: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8b12a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffffffffffff}, 0x40}, 0x0, 0xfffffffff7ffffff, 0xffffffffffffffff, 0x9) r0 = socket$inet(0x2, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r1, 0x0, 0x1600bd7c, 0x0, &(0x7f0000000080)) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4080, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_open_dev$vcsa(0x0, 0x0, 0x121200) socketpair$unix(0x1, 0x2, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000000300)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0xc) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200), 0xc) dup(r2) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond_slave_0\x00', 0x0}) bind$packet(r4, &(0x7f0000000100)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000011000d04000000000000000000a70000353f6104819b20c232c3b37e8079241971b5369ef34425df814030e4766514ccf78baf0a0284f8647a9c54e479554aceed051427752378abe27c02bfc9ef2e26a9c80ecd2a265b9ae9faad9b6f", @ANYRES32=r7, @ANYBLOB="0000000000000000c92c2187cd6465b57d6db50065aafba13e3d3a7e88b612380745e7e56ef584174f616d16c33ca7dd08f3cd500c00a981482ecc2b9c2607c55d7df1cbff3f02236ac96323a8a3fec34834af2a59282d71b410e285751d30ce3955696ddfbb0a6306a78b9bc3d2785172f4ac00"], 0x20}}, 0x0) 02:31:05 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYRESDEC], 0x14) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0xfffffffffffffe1e, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4, @ANYBLOB="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"], 0x4c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getpeername$packet(r7, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000006c0)=0x14) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x0, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYRES64, @ANYBLOB="b2aacff5f8d020f4", @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32, @ANYBLOB="08000700ffffffff08000a00", @ANYRESOCT, @ANYRESDEC], 0x7}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r12, 0xffffff0f00000000, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000001c40)={'batadv0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000001c80)={@mcast2, 0x0}, &(0x7f0000001cc0)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = fcntl$dupfd(r16, 0x0, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) accept4$packet(r17, &(0x7f0000001d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001dc0)=0x14, 0x80800) r19 = socket$netlink(0x10, 0x3, 0x0) r20 = socket(0x10, 0x0, 0x0) getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r19, &(0x7f00000000c0)={0x0, 0xfffffffffffffe1e, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r21, @ANYBLOB="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"], 0x4c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001ec0)={'batadv0\x00', r21}) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000001fc0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f00)={0x68, r1, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r11}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x2}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r13}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r14}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r18}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r22}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0xc001}, 0x50) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="747e779e73d52d46e9568e4348743d2d"]) 02:31:05 executing program 3: ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000380)={0x4, 0x70, 0x95, 0x7, 0x49, 0x9, 0x0, 0x9, 0x440, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x200, 0x4, 0x9, 0x5, 0x1000, 0x7, 0xebd8}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) close(r0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, 0x2, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L4PROTO={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c055}, 0x44090) r1 = socket$inet6(0xa, 0x100000000802, 0x0) r2 = semget$private(0x0, 0x8, 0x0) semop(r2, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semctl$IPC_RMID(r2, 0x0, 0x0) semctl$GETALL(r2, 0x0, 0xd, &(0x7f00000000c0)=""/187) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="35d4a7cf18000000629841c900"}, 0x1c) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac623ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a92825a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x104eb, 0x8, 0x0, 0xffffffffffffff1a) setsockopt$inet_tcp_buf(r3, 0x6, 0xb, &(0x7f0000000400)="53fe918dd1cb550df12059138dc2d68981014fffd974215ee40df5d14102b5e9aa17cd9c0fe327df9f59085f18721172b56ae46a50e81aaac6f7d5edb92cf520861cf89c87298ca12e205bdf36016998a6c5b9a68b689b0b7b047c142c6db98bdcdde592caeb542b01470b7f1fd32f658d2fcb384f889c40fa0e84529f115f3e4b5dd142e1d3", 0x86) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac623ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a92825a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x104eb, 0x8, 0x0, 0xffffffffffffff1a) r5 = socket$inet(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r6 = socket$inet(0x2, 0x4000000805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = dup3(r6, r7, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r8, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x14, &(0x7f000059aff8)={r9}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000380)={r9, 0x2, 0x54, 0x7fffffff}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000300)={r9, 0x9}, &(0x7f00000004c0)=0x8) sendmmsg$inet_sctp(r0, &(0x7f0000000100), 0xa0, 0x0) 02:31:05 executing program 0: perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @remote}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000440)=0x1, 0xffe6) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0xffffff0f00000000, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="7261777401648f00000000000200000000000000000000000000000000000000020000000300000018030000b0010000b001000000000000b0010000b00100008002000080020000800200008002000080020000030000000000000000000000ffffffffac1e000100000000000000006970366772657461703000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009001b0010000000000000000000000000000000000000000f800726563656e740000000000000000000000000000000000000000000000000000000000000000020073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000290000000000000000009f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055643001be8cecb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000020004e4f545241434b000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000d00000000000000000000000000000000000000000006000434c5553544552495000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000340200000000000000000000000000feffffff"], 0x1) sendto$inet(r1, &(0x7f0000000140)="7c0d111317b1ff0100000000000000b10d0d000000efd9448dbef1ffb4e3a6af87131512da52ff6235fe35d3055cb4877c1b89bbf83f6d749d5b0067960123abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e43900c39ab79d37cc0ce7a", 0x6f, 0x4012, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) read$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0xfd87) 02:31:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080)='NLBL_CIPSOv4\x00') r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm_plock\x00', 0x20000, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x400, 0x70bd22, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048880}, 0x4000044) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)={0xa0, r2, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x38, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3e87}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d6f1a64}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x54b0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6fe4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x52cd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x63557c98}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x30, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2cf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5d76}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa037}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa7f9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x59f2}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0xa0}, 0x1, 0x0, 0x0, 0x14}, 0x15) bind$unix(0xffffffffffffffff, &(0x7f0000000640)=@abs={0x1, 0x0, 0x4e24}, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='.//ile0\x00') syz_genetlink_get_family_id$tipc2(0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='timerslack_ns\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0x81420000a77, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r7, 0xc91add0bf88807dd, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='timerslack_ns\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) splice(r9, 0x0, r8, 0x0, 0x81420000a77, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r10, &(0x7f0000000080)=ANY=[@ANYRESDEC], 0x14) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f0000000800)={0xa4, r7, 0x800, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r10}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x80) mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r11 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x46601, 0x0) perf_event_open$cgroup(&(0x7f00000004c0)={0x1, 0x70, 0x9, 0x0, 0x0, 0x0, 0x0, 0x20, 0x800, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000480), 0x11}, 0x0, 0x93, 0xc9a, 0x4, 0x5b, 0xfffffffc, 0x200}, r11, 0xe, 0xffffffffffffffff, 0x1) r12 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x20000800) sendmsg$NLBL_UNLABEL_C_LIST(r12, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)={0x3c, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:crond_exec_t:s0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x81) r13 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socket(0x10, 0x3, 0x4) lsetxattr$system_posix_acl(0x0, &(0x7f0000000200)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) renameat(r13, &(0x7f0000000180)='.//ile0\x00', r13, &(0x7f00000007c0)='./file0/f.le.\x00') open(&(0x7f0000000400)='./file1\x00', 0x0, 0x0) 02:31:05 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) [ 344.862193] batman_adv: Cannot find parent device [ 344.906139] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 344.953504] batman_adv: Cannot find parent device 02:31:06 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x7, 0xfffffffd, 0x0, 0x3, 0x1, 0xffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='timerslack_ns\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x81420000a77, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f00000000c0)=0x9) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x2000002) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x404000, 0x0) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, &(0x7f0000000180), 0x4) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x0, 0xfffffffe, 0xc3}) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffb000/0x3000)=nil) r5 = socket(0xa, 0x2, 0x0) close(r5) r6 = socket$inet6(0xa, 0x100000000802, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="35d4a7cf18000000629841c900"}, 0x1c) sendmmsg$inet_sctp(r5, &(0x7f0000000100), 0xa0, 0x0) [ 344.991858] FAT-fs (loop5): Unrecognized mount option "t~ws-FVCHt=-" or missing value [ 345.057543] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 345.142336] batman_adv: Cannot find parent device [ 345.175353] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 345.204119] batman_adv: Cannot find parent device 02:31:06 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000340)) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000380)=""/106, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x40000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='timerslack_ns\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x81420000a75, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x7a, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7e67}, @in={0x2, 0x4e24, @multicast2}], 0x2c) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000002c0)={0x0, 0x1}, 0xc) syz_open_procfs(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:31:06 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000100)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x40000000011, r1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000240)) r2 = socket$inet(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0xffffff0f00000000, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="7261777401648f00000000000200000000000000000000000000000000000000020000000300000018030000b0010000b001000000000000b0010000b00100008002000080020000800200008002000080020000030000000000000000000000ffffffffac1e000100000000000000006970366772657461703000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009001b0010000000000000000000000000000000000000000f800726563656e740000000000000000000000000000000000000000000000000000000000000000020073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000290000000000000000009f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055643001be8cecb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000020004e4f545241434b000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000d00000000000000000000000000000000000000000006000434c5553544552495000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000340200000000000000000000000000feffffff"], 0x1) r4 = dup(r3) ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, &(0x7f0000000180)=0x9) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x14, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000380)={r8, 0x2, 0x54, 0x7fffffff}, 0x10) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r8, 0x4}, 0x8) read$FUSE(r0, &(0x7f0000000380), 0x313) [ 345.514332] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 345.568873] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 345.588110] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 345.622890] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 345.678230] overlayfs: filesystem on './file0' not supported as upperdir 02:31:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) 02:31:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080)='NLBL_CIPSOv4\x00') r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm_plock\x00', 0x20000, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x400, 0x70bd22, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048880}, 0x4000044) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)={0xa0, r2, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x38, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3e87}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d6f1a64}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x54b0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6fe4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x52cd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x63557c98}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x30, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2cf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5d76}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa037}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa7f9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x59f2}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0xa0}, 0x1, 0x0, 0x0, 0x14}, 0x15) bind$unix(0xffffffffffffffff, &(0x7f0000000640)=@abs={0x1, 0x0, 0x4e24}, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='.//ile0\x00') syz_genetlink_get_family_id$tipc2(0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='timerslack_ns\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0x81420000a77, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r7, 0xc91add0bf88807dd, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='timerslack_ns\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) splice(r9, 0x0, r8, 0x0, 0x81420000a77, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r10, &(0x7f0000000080)=ANY=[@ANYRESDEC], 0x14) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f0000000800)={0xa4, r7, 0x800, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r10}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x80) mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r11 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x46601, 0x0) perf_event_open$cgroup(&(0x7f00000004c0)={0x1, 0x70, 0x9, 0x0, 0x0, 0x0, 0x0, 0x20, 0x800, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000480), 0x11}, 0x0, 0x93, 0xc9a, 0x4, 0x5b, 0xfffffffc, 0x200}, r11, 0xe, 0xffffffffffffffff, 0x1) r12 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x20000800) sendmsg$NLBL_UNLABEL_C_LIST(r12, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)={0x3c, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:crond_exec_t:s0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x81) r13 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socket(0x10, 0x3, 0x4) lsetxattr$system_posix_acl(0x0, &(0x7f0000000200)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) renameat(r13, &(0x7f0000000180)='.//ile0\x00', r13, &(0x7f00000007c0)='./file0/f.le.\x00') open(&(0x7f0000000400)='./file1\x00', 0x0, 0x0) [ 345.926604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.946533] batman_adv: batadv0: Removing interface: batadv_slave_0 02:31:07 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000280)=""/240, 0xf0}, 0x0) r0 = socket$kcm(0xa, 0x2, 0x11) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0xffffff0f00000000, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000100)={{0x0, @rand_addr=0xfffffff9, 0x4e21, 0x4, 'rr\x00', 0x4, 0xfffffff7, 0x1f}, {@loopback, 0x4e22, 0x2000, 0x6c4, 0x2, 0x8}}, 0x44) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x2a0]}, 0xd}, 0x80, &(0x7f0000000340), 0x2b, &(0x7f0000000180)}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0xa, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x100000000802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="35d4a7cf18000000629841c900"}, 0x1c) sendmmsg$inet_sctp(r2, &(0x7f0000000100), 0xa0, 0x0) [ 345.991233] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000641a) [ 346.006265] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.013352] FAT-fs (loop1): Filesystem has been set read-only [ 346.019741] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.046236] device bridge_slave_1 left promiscuous mode [ 346.053280] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 346.056625] bridge0: port 2(bridge_slave_1) entered disabled state 02:31:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) [ 346.094865] IPVS: set_ctl: invalid protocol: 0 255.255.255.249:20001 [ 346.121061] device bridge_slave_0 left promiscuous mode [ 346.132685] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.158885] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 346.181481] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000641a) [ 346.188112] IPVS: set_ctl: invalid protocol: 0 255.255.255.249:20001 [ 346.195995] device veth1_macvtap left promiscuous mode [ 346.206985] device veth0_macvtap left promiscuous mode 02:31:07 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) [ 346.231573] device veth1_vlan left promiscuous mode 02:31:07 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x100000000802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="35d4a7cf18000000629841c900"}, 0x1c) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYRESDEC], 0x14) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0xe, @raw_data="88c54fbfe1fce439fab34c3fd0a72ba3b7af3d4093ce0fddd5f06f09252f24040d6d0a4b41a8d96a128f149e1403e8b3faa0208af424cd48889ca55807f6e9f3bfeefd6ecfb17a1911b22124d2b419546640d445945c11439227620c2cf9f455b5fdb4c04c202b0f99fddc5f6879900c05968892d1b5daa3017a9d8e805bb55897c068f1c5af34d4eab38a94a8a5c7cf49b886111cb8b4597a3d363f13d1ea5032d08575a0c059a2ee6ddb6c8e36de95c4f0c6fe093cf40afb95d08ca172a644fd85bc9a955056bc"}) sendmmsg$inet_sctp(r0, &(0x7f0000000100), 0xa0, 0x0) [ 346.257626] device veth0_vlan left promiscuous mode 02:31:07 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) close(r0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x14b200, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={'wireguard1\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}) r2 = socket$inet6(0xa, 0x100000000802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="35d4a7cf18000000629841c900"}, 0x1c) sendmmsg$inet_sctp(r0, &(0x7f0000000100), 0xa0, 0x0) [ 346.429040] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 346.453125] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 346.499332] FAT-fs (loop0): Filesystem has been set read-only [ 346.507054] FAT-fs (loop1): Filesystem has been set read-only 02:31:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:07 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) 02:31:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='timerslack_ns\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x81420000a77, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000040000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000480)="66b94b09000066b8d8ab023766bac4c7af0d0f300f01c466b80500000066b9680000000f01d9260f017c00f23e7a000f01f766b9520300000f326766c74424001e51b4346766c7442402008000006766c744240600000000670f011c24baf80c66b86cf5558666efbafc0c66b80500000066ef660f38803a", 0x78}], 0x1, 0x1f, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={&(0x7f0000000080), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000002f000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 346.620803] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17) 02:31:07 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x200, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000300)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x2, 0x0) close(r1) r2 = socket$inet6(0xa, 0x100000000802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="35d4a7cf18000000629841c900"}, 0x1c) sendmmsg$inet_sctp(r1, &(0x7f0000000100), 0xa0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0xfffffffffffffe1e, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r6, @ANYBLOB="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"], 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vlan0\x00', r6}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r3, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000001}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x1a}}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x54}, 0x1, 0x0, 0x0, 0x24008090}, 0x805) [ 346.700122] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 346.872627] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 346.931228] FAT-fs (loop1): Filesystem has been set read-only [ 346.958223] device hsr_slave_1 left promiscuous mode [ 347.016304] device hsr_slave_0 left promiscuous mode [ 347.090706] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 347.102103] team0 (unregistering): Port device team_slave_1 removed [ 347.175281] team0 (unregistering): Port device team_slave_0 removed [ 347.228357] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 347.305882] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 347.465455] bond0 (unregistering): Released all slaves [ 349.923502] IPVS: ftp: loaded support on port[0] = 21 [ 350.551098] NOHZ: local_softirq_pending 08 [ 350.935520] chnl_net:caif_netlink_parms(): no params data found [ 351.032012] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.038559] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.052226] device bridge_slave_0 entered promiscuous mode [ 351.059936] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.070930] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.078417] device bridge_slave_1 entered promiscuous mode [ 351.147371] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 351.176094] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 351.229747] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 351.250879] team0: Port device team_slave_0 added [ 351.257018] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 351.280971] team0: Port device team_slave_1 added [ 351.323432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.329840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.397184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.414718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.423939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.456191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.496583] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 351.516360] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 351.614294] device hsr_slave_0 entered promiscuous mode [ 351.670664] device hsr_slave_1 entered promiscuous mode [ 351.711069] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 351.721088] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 351.952213] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 352.076632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.087431] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 352.097309] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 352.104256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 352.112452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 352.122919] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 352.129034] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.139437] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 352.146850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 352.155711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 352.164152] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.170619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.181640] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 352.189363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 352.197679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 352.205871] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 352.214286] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.220726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.231331] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 352.239087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 352.257103] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 352.264801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 352.283016] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 352.296502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 352.305360] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 352.322657] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 352.335687] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 352.343586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 352.352450] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 352.363823] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 352.371388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 352.383276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 352.394210] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 352.402324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 352.410000] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 352.422426] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 352.428851] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 352.454048] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 352.469704] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 352.479264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 352.495593] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 352.508666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.628786] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 352.646225] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 352.657868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 352.668699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 352.743437] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 352.755318] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 352.765261] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 352.779665] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 352.788997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 352.803041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 352.816281] device veth0_vlan entered promiscuous mode [ 352.826753] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 352.837660] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 352.855449] device veth1_vlan entered promiscuous mode [ 352.864025] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 352.894126] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 352.920709] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 352.928584] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 352.952989] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 352.964649] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 352.971790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 352.979632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 352.991267] device veth0_macvtap entered promiscuous mode [ 352.998082] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 353.008711] device veth1_macvtap entered promiscuous mode [ 353.015425] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 353.034604] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 353.051319] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 353.067781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 353.077797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.093487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 353.105437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.123768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 353.142431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.173311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 353.196367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.206163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 353.216311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.225576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 353.235663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.244845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 353.254917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.265337] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 353.272763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.282657] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 353.289946] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 353.297781] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 353.305787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 353.316693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 353.326911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.350112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 353.359971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.390195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 353.399945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.410117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 353.419842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.450119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 353.459866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.490091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 353.499850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.530090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 353.539935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.554257] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 353.563313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.574391] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 353.585420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 02:31:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xfdad, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x200000, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000010000200"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008650029008d050000"], 0x28}}, 0x0) 02:31:16 executing program 3: r0 = socket(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x100000000802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="35d4a7cf18000000629841c900"}, 0x1c) sendmmsg$inet_sctp(r0, &(0x7f0000000100), 0xa0, 0x0) 02:31:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:16 executing program 2: r0 = socket$inet6(0xa, 0x400000000005, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='timerslack_ns\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0x81420000a77, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80200020}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x2, 0x7, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000300)=0x100000001) ftruncate(r6, 0x200004) sendfile(r0, r6, 0x0, 0x80001d00c0d0) 02:31:16 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) 02:31:16 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r1 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) bind$llc(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000180)='cgroup.subtree_control\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfff}, 0x1, 0xfd5, 0x0, 0x0, 0x3, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) [ 355.474735] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 355.487634] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 17) [ 355.510276] FAT-fs (loop1): Filesystem has been set read-only [ 355.516541] FAT-fs (loop0): Filesystem has been set read-only 02:31:16 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfffffffffffffffb}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000100)) r1 = socket(0xa, 0x2, 0x0) close(r1) r2 = socket$inet6(0xa, 0x100000000802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="35d4a7cf18000000629841c900"}, 0x1c) sendmmsg$inet_sctp(r1, &(0x7f0000000100), 0xa0, 0x0) 02:31:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 355.630823] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17) 02:31:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = semget$private(0x0, 0x2000000010a, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000380)) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'ip6tnl0\x00', 0x4000}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e23, 0xef, @local, 0x8}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r3, 0x40}, &(0x7f00000001c0)=0x8) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@local}, {@in6=@local, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) [ 355.721785] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 17) 02:31:17 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x100000000802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="35d4a7cf18000000629841c900"}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='timerslack_ns\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x81420000a77, 0x0) ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f00000000c0)={0x1f}) sendmmsg$inet_sctp(r0, &(0x7f0000000100), 0xa0, 0x0) 02:31:17 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x99, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x20150, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) bind$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="000000000200001000"], 0x18}, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000300)={0x0, 0x0, 0x4, 0x20000, 0x5, {r0, r1/1000+30000}, {0x3, 0x1, 0x7f, 0x5c, 0x5, 0x5, "c6411c2b"}, 0x0, 0x4, @planes=&(0x7f00000002c0)={0x80000001, 0x1}, 0x7ff, 0x0, 0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) accept4$rose(r3, &(0x7f0000000100)=@full={0xb, @dev, @bcast, 0x0, [@rose, @rose, @rose, @bcast, @null, @null]}, &(0x7f0000000140)=0x40, 0x80c00) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000440)={{0x0, 0x4, 0x0, 0x8001, 'syz1\x00'}, 0x6, 0x40, 0x9, 0x0, 0x2, 0x3, 'syz1\x00', &(0x7f0000000400)=['@\x00', '\x00'], 0x3, [], [0x10, 0xffff]}) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_int(r2, 0x0, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r4, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r4, 0x5) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = accept4(r4, 0x0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e1f, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x1000000000054}, 0x98) 02:31:17 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0xfe, 0x0}, 0x3}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 02:31:17 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0xc) mmap$fb(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x4010, r0, 0x73000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x1, 0x1f04}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000000c0)={r1, 0x7fff}, 0x8) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f0000000140)) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f00000001c0)="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") sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x110, 0x0, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x57c}, @CTA_TUPLE_MASTER={0x18, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @empty}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_TUPLE_REPLY={0xcc, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @rand_addr=0x3}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x4}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x96}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, [], 0x30}}, {0x14, 0x4, @ipv4={[], [], @remote}}}}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x8000}, 0x448e1) flistxattr(r0, &(0x7f00000004c0)=""/44, 0x2c) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500)='/dev/hwrng\x00', 0x40, 0x0) read$usbfs(r4, &(0x7f0000000540)=""/193, 0xc1) r5 = creat(&(0x7f0000000640)='./file0\x00', 0x20) connect$unix(r5, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000700)='/proc/self/net/pfkey\x00', 0x4002, 0x0) write$cgroup_int(r6, &(0x7f0000000740)=0x51a5, 0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000780)) openat(0xffffffffffffffff, &(0x7f00000007c0)='./file0\x00', 0x561801, 0x2) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000800)='/proc/asound/seq/clients\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000840)={r1, 0x8, 0xff2d}, &(0x7f0000000880)=0x8) dup(0xffffffffffffffff) write$P9_RLERROR(0xffffffffffffffff, &(0x7f00000008c0)={0x1b, 0x7, 0x2, {0x12, 'posix_acl_access@^'}}, 0x1b) r8 = socket$isdn_base(0x22, 0x3, 0x0) lseek(r8, 0x3ff, 0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(r9, &(0x7f0000001e80)=[{&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/223, 0xdf}, {&(0x7f0000000b40)=""/156, 0x9c}, {&(0x7f0000000c00)=""/169, 0xa9}, {&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001cc0)=""/53, 0x35}, {&(0x7f0000001d00)=""/185, 0xb9}, {&(0x7f0000001dc0)=""/154, 0x9a}], 0x8, 0x64) r10 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001f00)='/dev/sequencer\x00', 0x0, 0x0) recvfrom$rxrpc(r10, &(0x7f0000001f40)=""/212, 0xd4, 0x40000002, 0x0, 0x0) r11 = open(&(0x7f0000002040)='./file0\x00', 0x183002, 0x121) mknodat(r11, &(0x7f0000002080)='./file0\x00', 0xc000, 0x7) 02:31:17 executing program 2: bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x0, 0x0}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000540)=[{0x0}], 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x40000, 0x0) ioctl$BLKSECTGET(r3, 0x1267, &(0x7f0000000340)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='timerslack_ns\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0x81420000a77, 0x0) ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f0000000040)={0xfd50bb1b5a15ea41, 0xd000, 0x1, 0x0, 0x10}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f00000000c0)={0x0, @loopback, @dev}, &(0x7f0000000140)=0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000000206010400000000000000000100000a09000200737900000005000b00070000008db3bd1052ddbbfcb57f9baf8363cb5e1aff34568fdec99eff00"/73], 0x30}, 0x1, 0x0, 0x0, 0x80000a0}, 0x44040) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f00000004c0)={0x0, @ethernet={0x6, @dev={[], 0x1c}}, @l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, @sco={0x1f, @none}, 0x2, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000380)='tunl0\x00', 0x6, 0x401, 0x3}) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x4c, r6, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000884}, 0x20000004) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) 02:31:17 executing program 4: r0 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r0, 0x8003f1) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x840000000002, 0x3, 0x6) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x7fffffff}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000140)={r3, 0x326, 0x30, 0xfffffffffffffcad, 0x3}, &(0x7f0000000180)=0x18) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r1, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) socket$inet6(0xa, 0x0, 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f00000000c0)='./file0\x00') 02:31:17 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 356.791078] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17) 02:31:17 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xac) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0xffffff0f00000000, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000180)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000000280)=0xe8) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="a7c131372c02002cbd7000fe00", @ANYRES32=r3, @ANYBLOB="e6ffa7c860e4368315109924bf258b4cabec2f0324977047822ccead26eec2e4872153f06ca907b3d78a2091da30a29d8f065f65745f3e6eaa3e61cee408fb2ffb531c553ee331a23cfd9014b248b5d25ee6a5c9d55e2a8b"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x240140c5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket(0xa, 0x2, 0x0) close(r4) r5 = socket$inet6(0xa, 0x100000000802, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f00000002c0)=0x10000, 0x4) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='timerslack_ns\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0x81420000a77, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @rand_addr="35d4a7cf18000000629841c900"}, 0x1c) sendmmsg$inet_sctp(r4, &(0x7f0000000100), 0xa0, 0x0) [ 356.835608] FAT-fs (loop1): Filesystem has been set read-only 02:31:18 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:18 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 356.959157] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 357.011029] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17) 02:31:18 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x100000000802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="35d4a7cf18000000629841c900"}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='timerslack_ns\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x81420000a77, 0x0) ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f00000000c0)={0x1f}) sendmmsg$inet_sctp(r0, &(0x7f0000000100), 0xa0, 0x0) [ 357.224275] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 357.263873] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 357.302700] FAT-fs (loop0): Filesystem has been set read-only [ 357.350772] FAT-fs (loop1): Filesystem has been set read-only 02:31:18 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:18 executing program 4: socket$inet(0x2, 0x200000002, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0xffffff0f00000000, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8) 02:31:18 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 357.460316] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 357.501190] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 357.526750] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 357.531100] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) 02:31:18 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00001e1000/0x2000)=nil, 0x2000}, 0x2}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd/4\x00') r2 = socket$inet(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x14, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000380)={r6, 0x2, 0x54, 0x7fffffff}, 0x10) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000100)={r6, @in6={{0xa, 0x4e20, 0x81, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}}}, 0x84) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f0000000080)={{&(0x7f0000525000/0x1000)=nil, 0x400000}, 0x118000}) [ 357.707284] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 357.717278] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 357.748876] FAT-fs (loop1): Filesystem has been set read-only 02:31:18 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x100000000802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="35d4a7cf18000000629841c900"}, 0x1c) sendmmsg$inet_sctp(r0, &(0x7f0000000100), 0xa0, 0x0) 02:31:18 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x0, 0x40000000, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000240)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="64643d8af7a743111427904e748984766f6b3236d41cfcc847e1f53b1ce0d89799dec1f80eaaabdf0a027e3786ef9b6336043adbf8390cb3088c03adc05a1dbdd5eaf4d82b9a5d2d666baf7be9798267dcc7e2269bb7d913027b1d662abd1ad5607ed94007ce2eb16bf17be9323cb8027605c00a", @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, 0x0) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000540)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[], [{@context={'context', 0x3d, 'staff_u'}}]}}) r7 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r8, &(0x7f0000000440)=""/400, 0xff3b) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8020003) writev(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) lseek(0xffffffffffffffff, 0x0, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = syz_open_procfs(0x0, &(0x7f0000000100)='timerslack_ns\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) splice(r13, 0x0, r12, 0x0, 0x81420000a77, 0x0) ioctl$TIOCGPGRP(r7, 0x540f, 0x0) 02:31:18 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:19 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x140, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x292000, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000100)={0xa0000000, 0x100, "e71955b077fe5ae567b9ed3cbe979a35d9950aa7490229b1f47beb4b498c04e4", 0x4, 0xb9e7, 0x40, 0x0, 0x8, 0x3, 0x40, 0x7, [0x2, 0x80000000, 0x8, 0x3]}) r1 = socket(0xa, 0x2, 0x0) close(r1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYRESDEC], 0x14) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000200)={0x9, 0x4}) r3 = socket$inet6(0xa, 0x100000000802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0xffffff0f00000000, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000240), 0x10) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="35d4a7cf18000000629841c900"}, 0x1c) sendmmsg$inet_sctp(r1, &(0x7f0000000100), 0xa0, 0x0) [ 357.922502] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17) 02:31:19 executing program 4: keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x2, 0x101000) ioctl$SNDCTL_DSP_GETTRIGGER(r0, 0x80045010, &(0x7f0000000140)) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0x108) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000180), &(0x7f0000000200)=0x4) 02:31:19 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0xffffff0f00000000, 0x40, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x1) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r5) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x40000, 0x0) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r6, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000940)={0x15c, r7, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x71}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x597137ee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x10}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdc}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x33}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x29842799}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76797d86}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x48}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x23}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b8c6c3c}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x646795ab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c056252}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28f32ed8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d79b736}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4e4f81cd}]}, {0x4}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x27}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43fb49cc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2389a21}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45fc83b6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6134a0f1}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x28, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3284}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5756}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa06c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x95d5}]}]}]}, 0x15c}}, 0x8810) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r8 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) [ 358.114006] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 358.207439] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 358.265159] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17) 02:31:19 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, r3, 0x0, 0x6, &(0x7f00000001c0)='\'eth0\x00'}, 0x30) prlimit64(r4, 0x0, &(0x7f0000000240)={0x3}, &(0x7f0000000280)) r5 = socket$inet6(0xa, 0x100000000802, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="35d4a7cf18000000629841c900"}, 0x1c) sendmmsg$inet_sctp(r0, &(0x7f0000000100), 0xa0, 0x0) syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x100000001, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f00000002c0)) r9 = socket$inet_udp(0x2, 0x2, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0xffffff0f00000000, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r9, 0xc0406619, &(0x7f0000000180)={{0x1, 0x0, @reserved="5414ae5216e160e31fc7edb5b193d9e67dede85ef19c3bfb3937d7d5e5bcedbb"}}) [ 358.307192] FAT-fs (loop1): Filesystem has been set read-only 02:31:19 executing program 4: keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x2, 0x101000) ioctl$SNDCTL_DSP_GETTRIGGER(r0, 0x80045010, &(0x7f0000000140)) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0x108) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000180), &(0x7f0000000200)=0x4) [ 358.372861] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. 02:31:19 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 358.498960] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17) 02:31:19 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:19 executing program 4: keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x2, 0x101000) ioctl$SNDCTL_DSP_GETTRIGGER(r0, 0x80045010, &(0x7f0000000140)) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0x108) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000180), &(0x7f0000000200)=0x4) 02:31:20 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0xffffff0f00000000, 0x40, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x1) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r5) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x40000, 0x0) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r6, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000940)={0x15c, r7, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x71}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x597137ee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x10}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdc}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x33}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x29842799}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76797d86}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x48}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x23}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b8c6c3c}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x646795ab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c056252}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28f32ed8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d79b736}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4e4f81cd}]}, {0x4}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x27}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43fb49cc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2389a21}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45fc83b6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6134a0f1}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x28, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3284}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5756}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa06c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x95d5}]}]}]}, 0x15c}}, 0x8810) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r8 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) 02:31:20 executing program 4: keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x2, 0x101000) ioctl$SNDCTL_DSP_GETTRIGGER(r0, 0x80045010, &(0x7f0000000140)) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0x108) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000180), &(0x7f0000000200)=0x4) 02:31:20 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) close(r0) r1 = socket$inet6(0xa, 0x100000000802, 0x0) prctl$PR_GET_SECUREBITS(0x1b) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="35d4a7cf18000000629841c900"}, 0x1c) sendmmsg$inet_sctp(r0, &(0x7f0000000100), 0xa0, 0x0) 02:31:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 359.668064] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. 02:31:20 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) 02:31:20 executing program 4: syz_emit_ethernet(0xdf, &(0x7f0000000000)={@random="0d2d5afda662", @broadcast, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "ae0424", 0xa5, 0x88, 0x0, @dev={0xfe, 0x80, [], 0x11}, @mcast2, {[@srh={0x0, 0x2, 0x4, 0x1, 0x6, 0xf0, 0x0, [@mcast1]}, @dstopts={0x6c, 0x7, [], [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x8001}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x1d}}, @calipso={0x7, 0x18, {0x2, 0x4, 0xfb, 0x81, [0x2, 0x7]}}]}], {0x0, 0x0, 0x4d, 0x0, [], "c0e0b3688017df01e6a64b8cc436d1a3bf19fa284e4bb50c87555770cf9a309bc6a38961b2819465b823d10848ba54197c29265af26264aa2e75bf730058d0eb20f2fb7842"}}}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SOUND_MIXER_READ_CAPS(r2, 0x80044dfc, &(0x7f0000000100)) 02:31:21 executing program 4: pipe(0x0) getpid() capget(&(0x7f0000000000), 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0xa, 0x300) fcntl$getownex(r0, 0x10, &(0x7f0000000240)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r2 = socket$caif_stream(0x25, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000cab000)=0x62) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000300)=""/151) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x89a2, &(0x7f0000000180)={'\x00', 0x4}) ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f0000000040)={0xffffffffffffff7f, 0x100000001, 0x8000}) gettid() bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0xc) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm_plock\x00', 0x400000, 0x0) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000002c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fe, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r7 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8e\x00'/15, 0x0) pwritev(r7, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) sendfile(r5, r6, 0x0, 0x102000004) 02:31:21 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x89e2, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x100000000802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="35d4a7cf18000000629841c900"}, 0x1c) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x10000, 0x128) read$fb(r2, &(0x7f0000000100)=""/102, 0x66) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0xffffff0f00000000, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1) fcntl$dupfd(r0, 0x406, r3) sendmmsg$inet_sctp(r0, &(0x7f0000000100), 0xa0, 0x0) [ 360.176486] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 360.214569] FAT-fs (loop0): Filesystem has been set read-only 02:31:21 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) [ 360.327372] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. 02:31:21 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0xffffff0f00000000, 0x40, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x1) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r5) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x40000, 0x0) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r6, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000940)={0x15c, r7, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x71}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x597137ee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x10}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdc}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x33}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x29842799}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76797d86}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x48}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x23}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b8c6c3c}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x646795ab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c056252}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28f32ed8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d79b736}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4e4f81cd}]}, {0x4}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x27}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43fb49cc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2389a21}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45fc83b6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6134a0f1}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x28, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3284}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5756}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa06c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x95d5}]}]}]}, 0x15c}}, 0x8810) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r8 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) [ 360.411940] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. 02:31:21 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x100000000802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, 0x1, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x81}, 0xf1690669a18b92d6) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0xfffffffc}, 0x1c) sendmmsg$inet_sctp(r0, &(0x7f0000000100), 0xa0, 0x0) 02:31:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 360.625002] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. 02:31:21 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x100000000802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="35d4a7cf18000000629841c900"}, 0x1c) sendmmsg$inet_sctp(r0, &(0x7f0000000100), 0xa0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYRESDEC], 0x14) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000140)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x80000000, 0x0, 0x3, 0x1, 0x8, 0x7fff}, 0x20) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x40900, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000100)={@local}) 02:31:21 executing program 4: pipe(0x0) getpid() capget(&(0x7f0000000000), 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0xa, 0x300) fcntl$getownex(r0, 0x10, &(0x7f0000000240)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r2 = socket$caif_stream(0x25, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000cab000)=0x62) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000300)=""/151) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x89a2, &(0x7f0000000180)={'\x00', 0x4}) ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f0000000040)={0xffffffffffffff7f, 0x100000001, 0x8000}) gettid() bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0xc) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm_plock\x00', 0x400000, 0x0) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000002c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fe, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r7 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8e\x00'/15, 0x0) pwritev(r7, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) sendfile(r5, r6, 0x0, 0x102000004) [ 361.095805] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 17) [ 361.173160] FAT-fs (loop1): Filesystem has been set read-only 02:31:22 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) 02:31:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:22 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0xffffff0f00000000, 0x40, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x1) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r5) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x40000, 0x0) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r6, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000940)={0x15c, r7, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x71}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x597137ee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x10}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdc}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x33}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x29842799}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76797d86}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x48}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x23}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b8c6c3c}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x646795ab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c056252}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28f32ed8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d79b736}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4e4f81cd}]}, {0x4}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x27}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43fb49cc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2389a21}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45fc83b6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6134a0f1}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x28, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3284}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5756}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa06c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x95d5}]}]}]}, 0x15c}}, 0x8810) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r8 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) [ 361.355504] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 17) 02:31:22 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffffffffdffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x100000000802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYRESDEC], 0x14) r3 = socket$inet(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = dup3(r4, r5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="020000002823f84da81fa2ce7ae2387b1ae34c958e60e4c382ffe931aa557aa1aaab7a06d8e1535899f5ef9d7b2aea89101fd6f412798be79a0b9a18188e9ec1151c433b4cb6d1e3026e504cabc8cc41d44282fb818f2b0217e5398e76087f5871f5fbaa812a1ee91fec7d2791331123a3617be8f521d1bdce1f65c857a37912270821c81c4937f5830644e29ef3018362d7081aeca057029fc7ef8e7f205df974ad1113e1c83f48abf360eae4c246ec805d5f063cebf75fc40a5d3aecd6e047d610976a60dd2e2559ee9beb2ae53cef0b23470ceeae37504924d17a6b", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x14, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000380)={r7, 0x2, 0x54, 0x7fffffff}, 0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000000c0)={r7, 0x20, 0x5, 0x80000001}, &(0x7f00000001c0)=0x10) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="23bf00", 0x3}, 0xfffffffffffffe59) sendmmsg$inet_sctp(r0, &(0x7f0000000100), 0xa0, 0x0) r8 = getpid() sched_setattr(r8, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) process_vm_writev(r8, &(0x7f00000000c0), 0x10000018, &(0x7f0000000180)=[{&(0x7f0000000100)=""/110, 0x6e}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[@ANYRESDEC], 0x14) ioctl$TUNGETDEVNETNS(r9, 0x54e3, 0x0) [ 361.493010] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. 02:31:22 executing program 4: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:22 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x100000000802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="35d4a7cf18000000629841c900"}, 0x1c) r5 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x404, 0x101200) ioctl$TCXONC(r5, 0x540a, 0x2) sendmmsg$inet_sctp(r0, &(0x7f0000000100), 0xa0, 0x0) [ 361.953969] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 17) [ 361.971895] FAT-fs (loop4): Filesystem has been set read-only 02:31:23 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffffffffdffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x100000000802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYRESDEC], 0x14) r3 = socket$inet(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = dup3(r4, r5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="020000002823f84da81fa2ce7ae2387b1ae34c958e60e4c382ffe931aa557aa1aaab7a06d8e1535899f5ef9d7b2aea89101fd6f412798be79a0b9a18188e9ec1151c433b4cb6d1e3026e504cabc8cc41d44282fb818f2b0217e5398e76087f5871f5fbaa812a1ee91fec7d2791331123a3617be8f521d1bdce1f65c857a37912270821c81c4937f5830644e29ef3018362d7081aeca057029fc7ef8e7f205df974ad1113e1c83f48abf360eae4c246ec805d5f063cebf75fc40a5d3aecd6e047d610976a60dd2e2559ee9beb2ae53cef0b23470ceeae37504924d17a6b", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x14, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000380)={r7, 0x2, 0x54, 0x7fffffff}, 0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000000c0)={r7, 0x20, 0x5, 0x80000001}, &(0x7f00000001c0)=0x10) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="23bf00", 0x3}, 0xfffffffffffffe59) sendmmsg$inet_sctp(r0, &(0x7f0000000100), 0xa0, 0x0) r8 = getpid() sched_setattr(r8, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) process_vm_writev(r8, &(0x7f00000000c0), 0x10000018, &(0x7f0000000180)=[{&(0x7f0000000100)=""/110, 0x6e}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[@ANYRESDEC], 0x14) ioctl$TUNGETDEVNETNS(r9, 0x54e3, 0x0) [ 362.137018] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000641a) 02:31:23 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r4, 0x0, r3) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:23 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0xffffff0f00000000, 0x40, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x1) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r5) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x40000, 0x0) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r6, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000940)={0x15c, r7, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x71}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x597137ee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x10}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdc}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x33}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x29842799}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76797d86}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x48}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x23}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b8c6c3c}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x646795ab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c056252}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28f32ed8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d79b736}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4e4f81cd}]}, {0x4}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x27}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43fb49cc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2389a21}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45fc83b6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6134a0f1}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x28, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3284}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5756}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa06c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x95d5}]}]}]}, 0x15c}}, 0x8810) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) 02:31:23 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYRESDEC], 0x14) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x7f8, 0xfc01, 0x3, 0x6, 0xb, "f4a894a8df9caf7a"}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="240000001e005f0214fffffffffffff8070000000000000000000000080008000d000000", 0x24) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='timerslack_ns\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x81420000a77, 0x0) ioctl$sock_bt_hci(r4, 0x800448d2, &(0x7f0000000380)="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") close(r1) r5 = socket$inet6(0xa, 0x100000000802, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="35d4a7cf18000000629841c900"}, 0x1c) sendmmsg$inet_sctp(r1, &(0x7f0000000100), 0xa0, 0x0) [ 362.414849] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. 02:31:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:23 executing program 4: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) [ 362.748167] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 362.782473] FAT-fs (loop1): Filesystem has been set read-only 02:31:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 362.823202] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 362.843164] FAT-fs (loop4): Filesystem has been set read-only [ 362.844610] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17) 02:31:24 executing program 4: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) [ 362.994208] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17) 02:31:24 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0xffffff0f00000000, 0x40, &(0x7f0000000ac0)=ANY=[@ANYBLOB="7261777401648f00000000000200000000000000000000000000000000000000020000000300000018030000b0010000b001000000000000b0010000b00100008002000080020000800200008002000080020000030000000000000000000000ffffffffac1e000100000000000000006970366772657461703000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009001b0010000000000000000000000000000000000000000f800726563656e740000000000000000000000000000000000000000000000000000000000000000020073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000290000000000000000009f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055643001be8cecb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000020004e4f545241434b000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000d00000000000000000000000000000000000000000006000434c5553544552495000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000340200000000000000000000000000feffffff9dcde85628dbc95eea18151a1cfc14333284fd3f5fe6a068bbb8814025f5b23e95206d60595b2cc43e711e753e5742fef19715854c034e0975039af1598268"], 0x1) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r5) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x40000, 0x0) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r6, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000940)={0x15c, r7, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x71}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x597137ee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x10}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdc}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x33}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x29842799}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76797d86}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x48}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x23}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b8c6c3c}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x646795ab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c056252}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28f32ed8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d79b736}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4e4f81cd}]}, {0x4}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x27}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43fb49cc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2389a21}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45fc83b6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6134a0f1}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x28, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3284}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5756}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa06c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x95d5}]}]}]}, 0x15c}}, 0x8810) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) 02:31:24 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r4, 0x0, r3) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:24 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='\x00', r1}, 0x10) close(r0) r2 = socket$inet6(0xa, 0x100000000802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="35d4a7cf18000000629841c900"}, 0x1c) sendmmsg$inet_sctp(r0, &(0x7f0000000100), 0xa0, 0x0) [ 363.162511] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 363.187119] FAT-fs (loop1): Filesystem has been set read-only [ 363.340923] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 363.384050] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17) 02:31:24 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 363.557674] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 363.594412] FAT-fs (loop0): Filesystem has been set read-only 02:31:24 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r4, 0x0, r3) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:24 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x100000000802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x2b, &(0x7f00000000c0)="ff020900000000000000000000b40000058512f9f8cde802e4bf5e6d29d0b2b0ee3045536225d9a54e3070bbf5670800f7ca6ba279d22a9ea02e6528007825f1a09ffe594ff912cf7483c098cf9dc4052a6356db8175a1c6d1404eac8ea683be76d8293d8d00f8f81b2dc4f0df3a92afc931", 0x12) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="35d4a7cf18000000629841c900"}, 0x1c) sendmmsg$inet_sctp(r0, &(0x7f0000000100), 0xa0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0xffffff0f00000000, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="7261777401648f00000000000200000000000000000000000000000000000000020000000300000018030000b0010000b001000000000000b0010000b00100008002000080020000800200008002000080020000030000000000000000000000ffffffffac1e000100000000000000006970366772657461703000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009001b0010000000000000000000000000000000000000000f800726563656e740000000000000000000000000000000000000000000000000000000000000000020073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000290000000000000000009f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055643001be8cecb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000020004e4f545241434b000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000d00000000000000000000000000000000000000000006000434c5553544552495000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000340200000000000000000000000000feffffff"], 0x1) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000140)=0x5) [ 363.784990] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 363.864302] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 363.932474] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF 02:31:25 executing program 3: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r4, 0x0, r3) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 363.994695] FAT-fs (loop0): Filesystem has been set read-only 02:31:25 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0xffffff0f00000000, 0x40, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x1) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r5) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x40000, 0x0) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r6, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000940)={0x15c, r7, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x71}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x597137ee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x10}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdc}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x33}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x29842799}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76797d86}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x48}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x23}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b8c6c3c}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x646795ab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c056252}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28f32ed8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d79b736}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4e4f81cd}]}, {0x4}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x27}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43fb49cc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2389a21}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45fc83b6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6134a0f1}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x28, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3284}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5756}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa06c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x95d5}]}]}]}, 0x15c}}, 0x8810) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) 02:31:25 executing program 4: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) 02:31:25 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 364.207011] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. 02:31:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 364.599089] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 364.613746] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 364.659708] FAT-fs (loop4): Filesystem has been set read-only [ 364.661750] FAT-fs (loop0): Filesystem has been set read-only 02:31:25 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 364.795161] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) 02:31:25 executing program 4: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r4, 0x0, r3) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 364.898546] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17) 02:31:26 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0xffffff0f00000000, 0x40, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x1) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r5) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x40000, 0x0) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r6, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000940)={0x15c, r7, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x71}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x597137ee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x10}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdc}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x33}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x29842799}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76797d86}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x48}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x23}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b8c6c3c}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x646795ab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c056252}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28f32ed8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d79b736}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4e4f81cd}]}, {0x4}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x27}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43fb49cc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2389a21}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45fc83b6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6134a0f1}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x28, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3284}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5756}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa06c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x95d5}]}]}]}, 0x15c}}, 0x8810) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) 02:31:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r4, 0x0, r3) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 365.143788] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 365.152660] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 365.396205] FAT-fs (loop0): Filesystem has been set read-only 02:31:26 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 365.603702] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) 02:31:26 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:26 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0xffffff0f00000000, 0x40, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x1) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r5) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x40000, 0x0) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r6, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000940)={0x15c, r7, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x71}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x597137ee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x10}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdc}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x33}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x29842799}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76797d86}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x48}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x23}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b8c6c3c}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x646795ab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c056252}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28f32ed8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d79b736}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4e4f81cd}]}, {0x4}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x27}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43fb49cc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2389a21}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45fc83b6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6134a0f1}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x28, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3284}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5756}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa06c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x95d5}]}]}]}, 0x15c}}, 0x8810) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) [ 365.988022] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000641a) 02:31:27 executing program 4: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r4, 0x0, r3) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 366.055266] FAT-fs (loop0): Filesystem has been set read-only [ 366.118896] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. 02:31:27 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r4, 0x0, r3) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 366.586751] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 366.595974] FAT-fs (loop0): Filesystem has been set read-only [ 366.684107] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 366.697875] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 366.700910] FAT-fs (loop3): Filesystem has been set read-only [ 366.740691] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 366.775432] FAT-fs (loop1): Filesystem has been set read-only 02:31:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r4, 0x0, r3) 02:31:27 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 366.798738] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17) 02:31:27 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0xffffff0f00000000, 0x40, &(0x7f0000000ac0)=ANY=[@ANYBLOB="7261777401648f00000000000200000000000000000000000000000000000000020000000300000018030000b0010000b001000000000000b0010000b00100008002000080020000800200008002000080020000030000000000000000000000ffffffffac1e000100000000000000006970366772657461703000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009001b0010000000000000000000000000000000000000000f800726563656e740000000000000000000000000000000000000000000000000000000000000000020073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000290000000000000000009f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055643001be8cecb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000020004e4f545241434b000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000d00000000000000000000000000000000000000000006000434c5553544552495000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000340200000000000000000000000000feffffff9dcde85628dbc95eea18151a1cfc14333284fd3f5fe6a068bbb8814025f5b23e95206d60595b2cc43e711e753e5742fef19715854c034e0975039af1598268"], 0x1) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r5) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x40000, 0x0) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r6, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000940)={0x15c, r7, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x71}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x597137ee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x10}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdc}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x33}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x29842799}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76797d86}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x48}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x23}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b8c6c3c}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x646795ab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c056252}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28f32ed8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d79b736}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4e4f81cd}]}, {0x4}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x27}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43fb49cc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2389a21}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45fc83b6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6134a0f1}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x28, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3284}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5756}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa06c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x95d5}]}]}]}, 0x15c}}, 0x8810) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) 02:31:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 366.911448] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 367.035638] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 367.062812] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 367.118911] FAT-fs (loop0): Filesystem has been set read-only 02:31:28 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r4, 0x0, r3) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 367.432915] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) 02:31:28 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0xffffff0f00000000, 0x40, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x1) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r4) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x40000, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000940)={0x15c, r6, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x71}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x597137ee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x10}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdc}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x33}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x29842799}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76797d86}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x48}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x23}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b8c6c3c}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x646795ab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c056252}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28f32ed8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d79b736}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4e4f81cd}]}, {0x4}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x27}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43fb49cc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2389a21}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45fc83b6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6134a0f1}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x28, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3284}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5756}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa06c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x95d5}]}]}]}, 0x15c}}, 0x8810) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) 02:31:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r4, 0x0, r3) [ 367.795433] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 17) [ 367.815623] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 367.848056] FAT-fs (loop4): Filesystem has been set read-only [ 367.859796] FAT-fs (loop0): Filesystem has been set read-only 02:31:28 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 367.951881] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. 02:31:29 executing program 4: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 368.058279] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000641a) [ 368.073507] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000641a) [ 368.103814] FAT-fs (loop3): Filesystem has been set read-only 02:31:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r4, 0x0, r3) [ 368.175263] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000641a) [ 368.404924] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 368.459018] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 368.472749] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 368.486130] FAT-fs (loop1): Filesystem has been set read-only [ 368.497306] FAT-fs (loop3): Filesystem has been set read-only [ 368.504561] FAT-fs (loop4): Filesystem has been set read-only 02:31:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:29 executing program 4: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r4, 0x0, r3) [ 368.580664] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 368.612284] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17) 02:31:29 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0xffffff0f00000000, 0x40, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x1) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r4) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x40000, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000940)={0x15c, r6, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x71}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x597137ee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x10}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdc}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x33}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x29842799}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76797d86}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x48}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x23}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b8c6c3c}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x646795ab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c056252}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28f32ed8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d79b736}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4e4f81cd}]}, {0x4}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x27}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43fb49cc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2389a21}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45fc83b6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6134a0f1}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x28, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3284}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5756}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa06c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x95d5}]}]}]}, 0x15c}}, 0x8810) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) [ 368.627664] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17) 02:31:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 368.829910] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 368.925913] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 368.928756] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17) 02:31:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 368.984594] FAT-fs (loop3): Filesystem has been set read-only [ 368.990948] FAT-fs (loop4): Filesystem has been set read-only 02:31:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:30 executing program 4: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r4, 0x0, r3) [ 369.087327] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 369.111094] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 369.432292] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17) 02:31:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 369.482379] FAT-fs (loop3): Filesystem has been set read-only [ 369.517017] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 17) 02:31:30 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0xffffff0f00000000, 0x40, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x1) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r4) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x40000, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000940)={0x15c, r6, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x71}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x597137ee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x10}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdc}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x33}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x29842799}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76797d86}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x48}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x23}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b8c6c3c}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x646795ab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c056252}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28f32ed8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d79b736}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4e4f81cd}]}, {0x4}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x27}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43fb49cc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2389a21}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45fc83b6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6134a0f1}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x28, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3284}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5756}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa06c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x95d5}]}]}]}, 0x15c}}, 0x8810) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) 02:31:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 369.548034] FAT-fs (loop4): Filesystem has been set read-only [ 369.564894] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17) 02:31:30 executing program 4: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 369.741918] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 17) [ 369.750587] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 369.802787] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 17) [ 369.860497] FAT-fs (loop3): Filesystem has been set read-only 02:31:31 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 369.985390] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000641a) [ 370.018134] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000641a) [ 370.066819] FAT-fs (loop4): Filesystem has been set read-only 02:31:31 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYRESDEC], 0x14) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x7f8, 0xfc01, 0x3, 0x6, 0xb, "f4a894a8df9caf7a"}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="240000001e005f0214fffffffffffff8070000000000000000000000080008000d000000", 0x24) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='timerslack_ns\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x81420000a77, 0x0) ioctl$sock_bt_hci(r4, 0x800448d2, &(0x7f0000000380)="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") close(r1) r5 = socket$inet6(0xa, 0x100000000802, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="35d4a7cf18000000629841c900"}, 0x1c) sendmmsg$inet_sctp(r1, &(0x7f0000000100), 0xa0, 0x0) [ 370.243631] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000641a) [ 370.274388] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 370.296306] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 370.319626] FAT-fs (loop3): Filesystem has been set read-only [ 370.327239] FAT-fs (loop0): Filesystem has been set read-only 02:31:31 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:31 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0xffffff0f00000000, 0x40, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x1) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r5) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x40000, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240)='NLBL_CIPSOv4\x00') vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) 02:31:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 370.614920] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 370.719637] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 370.787058] FAT-fs (loop3): Filesystem has been set read-only 02:31:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 370.921829] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17) 02:31:32 executing program 4: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 371.194644] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 17) [ 371.230917] FAT-fs (loop3): Filesystem has been set read-only 02:31:32 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0xffffff0f00000000, 0x40, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x1) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r5) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x40000, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) 02:31:32 executing program 3: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:32 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 371.411068] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 17) [ 371.419961] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 17) [ 371.452995] FAT-fs (loop4): Filesystem has been set read-only [ 371.516894] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. 02:31:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:32 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYRESDEC], 0x14) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x7f8, 0xfc01, 0x3, 0x6, 0xb, "f4a894a8df9caf7a"}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="240000001e005f0214fffffffffffff8070000000000000000000000080008000d000000", 0x24) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='timerslack_ns\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x81420000a77, 0x0) ioctl$sock_bt_hci(r4, 0x800448d2, &(0x7f0000000380)="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") close(r1) r5 = socket$inet6(0xa, 0x100000000802, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="35d4a7cf18000000629841c900"}, 0x1c) sendmmsg$inet_sctp(r1, &(0x7f0000000100), 0xa0, 0x0) [ 371.755353] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 17) [ 372.009470] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000641a) [ 372.037968] FAT-fs (loop1): Filesystem has been set read-only 02:31:33 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 372.123588] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000641a) 02:31:33 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0xffffff0f00000000, 0x40, &(0x7f0000000ac0)=ANY=[@ANYBLOB="7261777401648f00000000000200000000000000000000000000000000000000020000000300000018030000b0010000b001000000000000b0010000b00100008002000080020000800200008002000080020000030000000000000000000000ffffffffac1e000100000000000000006970366772657461703000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009001b0010000000000000000000000000000000000000000f800726563656e740000000000000000000000000000000000000000000000000000000000000000020073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000290000000000000000009f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055643001be8cecb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000020004e4f545241434b000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000d00000000000000000000000000000000000000000006000434c5553544552495000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000340200000000000000000000000000feffffff9dcde85628dbc95eea18151a1cfc14333284fd3f5fe6a068bbb8814025f5b23e95206d60595b2cc43e711e753e5742fef19715854c034e0975039af1598268"], 0x1) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r5) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) 02:31:33 executing program 3: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 372.429953] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 372.439837] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 372.457482] FAT-fs (loop1): Filesystem has been set read-only 02:31:33 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:33 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0xffffff0f00000000, 0x40, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x1) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r5) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x40000, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) 02:31:33 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 372.791319] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 372.908130] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. 02:31:34 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0xffffff0f00000000, 0x40, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x1) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r5) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) [ 373.441318] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. 02:31:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:34 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0xffffff0f00000000, 0x40, &(0x7f0000000ac0)=ANY=[@ANYBLOB="7261777401648f00000000000200000000000000000000000000000000000000020000000300000018030000b0010000b001000000000000b0010000b00100008002000080020000800200008002000080020000030000000000000000000000ffffffffac1e000100000000000000006970366772657461703000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009001b0010000000000000000000000000000000000000000f800726563656e740000000000000000000000000000000000000000000000000000000000000000020073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000290000000000000000009f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055643001be8cecb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000020004e4f545241434b000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000d00000000000000000000000000000000000000000006000434c5553544552495000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000340200000000000000000000000000feffffff9dcde85628dbc95eea18151a1cfc14333284fd3f5fe6a068bbb8814025f5b23e95206d60595b2cc43e711e753e5742fef19715854c034e0975039af1598268"], 0x1) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r5) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x40000, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) 02:31:34 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 373.870282] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. 02:31:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:35 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0xffffff0f00000000, 0x40, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x1) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) [ 374.317869] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 374.360573] FAT-fs (loop1): Filesystem has been set read-only [ 374.373208] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. 02:31:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:35 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0xffffff0f00000000, 0x40, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x1) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r5) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x40000, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) 02:31:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 374.641441] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 374.864226] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. [ 375.031443] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17) 02:31:36 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:36 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) socket$inet_udp(0x2, 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) [ 375.143723] FAT-fs (loop1): Filesystem has been set read-only 02:31:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 375.218765] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 375.478572] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 17) [ 375.535582] FAT-fs (loop0): Filesystem has been set read-only 02:31:36 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0xffffff0f00000000, 0x40, &(0x7f0000000ac0)=ANY=[@ANYBLOB="7261777401648f00000000000200000000000000000000000000000000000000020000000300000018030000b0010000b001000000000000b0010000b00100008002000080020000800200008002000080020000030000000000000000000000ffffffffac1e000100000000000000006970366772657461703000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009001b0010000000000000000000000000000000000000000f800726563656e740000000000000000000000000000000000000000000000000000000000000000020073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000290000000000000000009f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055643001be8cecb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000020004e4f545241434b000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000d00000000000000000000000000000000000000000006000434c5553544552495000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000340200000000000000000000000000feffffff9dcde85628dbc95eea18151a1cfc14333284fd3f5fe6a068bbb8814025f5b23e95206d60595b2cc43e711e753e5742fef19715854c034e0975039af1598268"], 0x1) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r5) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) 02:31:36 executing program 3: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:36 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 375.723374] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 17) [ 375.778032] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. 02:31:37 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) socket$inet_udp(0x2, 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) [ 376.254607] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 376.279598] FAT-fs (loop0): Filesystem has been set read-only 02:31:37 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:37 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:37 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0xffffff0f00000000, 0x40, &(0x7f0000000ac0)=ANY=[@ANYBLOB="7261777401648f00000000000200000000000000000000000000000000000000020000000300000018030000b0010000b001000000000000b0010000b00100008002000080020000800200008002000080020000030000000000000000000000ffffffffac1e000100000000000000006970366772657461703000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009001b0010000000000000000000000000000000000000000f800726563656e740000000000000000000000000000000000000000000000000000000000000000020073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000290000000000000000009f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055643001be8cecb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000020004e4f545241434b000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000d00000000000000000000000000000000000000000006000434c5553544552495000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000340200000000000000000000000000feffffff9dcde85628dbc95eea18151a1cfc14333284fd3f5fe6a068bbb8814025f5b23e95206d60595b2cc43e711e753e5742fef19715854c034e0975039af1598268"], 0x1) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r5) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) [ 376.581276] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) 02:31:37 executing program 3: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 376.719124] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. 02:31:38 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) [ 376.998760] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 377.037048] FAT-fs (loop1): Filesystem has been set read-only 02:31:38 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 377.190769] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17) 02:31:38 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0xffffff0f00000000, 0x40, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x1) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r5) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) 02:31:38 executing program 3: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:38 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 377.625089] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawtd'. 02:31:38 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(r4, 0x407, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) [ 378.062338] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000641a) [ 378.119305] FAT-fs (loop3): Filesystem has been set read-only 02:31:39 executing program 3: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 378.283426] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000641a) 02:31:39 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) 02:31:39 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 378.677267] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17) 02:31:39 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 378.744704] FAT-fs (loop3): Filesystem has been set read-only 02:31:39 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(r4, 0x407, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) 02:31:39 executing program 3: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 378.921314] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17) 02:31:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) 02:31:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:40 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(r4, 0x407, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) 02:31:40 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 380.049171] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000641a) 02:31:41 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) [ 380.101748] FAT-fs (loop0): Filesystem has been set read-only 02:31:41 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 380.270846] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000641a) 02:31:41 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) 02:31:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:42 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) 02:31:42 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:42 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) 02:31:42 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 381.774780] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 17) [ 381.815018] FAT-fs (loop0): Filesystem has been set read-only 02:31:42 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) 02:31:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 381.991348] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000641a) [ 381.991854] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000641a) [ 382.032532] FAT-fs (loop1): Filesystem has been set read-only [ 382.154826] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000641a) 02:31:43 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:43 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) [ 382.450855] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 382.494860] FAT-fs (loop0): Filesystem has been set read-only [ 382.525577] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17) 02:31:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 382.563265] FAT-fs (loop1): Filesystem has been set read-only 02:31:43 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 382.621442] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 382.681350] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17) 02:31:43 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) 02:31:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:44 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 382.995690] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 383.004251] FAT-fs (loop1): Filesystem has been set read-only [ 383.080705] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17) 02:31:44 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) [ 383.597858] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 17) 02:31:44 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 383.666334] FAT-fs (loop1): Filesystem has been set read-only 02:31:44 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:44 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) [ 383.820864] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 17) [ 384.167712] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000641a) 02:31:45 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) [ 384.212448] FAT-fs (loop0): Filesystem has been set read-only 02:31:45 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 384.361676] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000641a) 02:31:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:45 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) [ 384.694495] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 384.733005] FAT-fs (loop0): Filesystem has been set read-only 02:31:45 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:45 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 384.964169] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) 02:31:46 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) [ 385.264942] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 17) [ 385.337935] FAT-fs (loop0): Filesystem has been set read-only 02:31:46 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:46 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) 02:31:46 executing program 3: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 385.610876] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 17) 02:31:47 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) 02:31:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 386.072845] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000641a) [ 386.080893] FAT-fs (loop3): Filesystem has been set read-only [ 386.170893] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000641a) 02:31:47 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 386.405218] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 386.423452] FAT-fs (loop3): Filesystem has been set read-only 02:31:47 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) 02:31:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 386.520775] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 386.770011] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 386.822887] FAT-fs (loop3): Filesystem has been set read-only 02:31:47 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) 02:31:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 386.919004] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 386.940836] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 386.973756] FAT-fs (loop0): Filesystem has been set read-only 02:31:48 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 387.160912] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) 02:31:48 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:48 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) 02:31:48 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) [ 387.752484] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 17) [ 387.789371] FAT-fs (loop1): Filesystem has been set read-only 02:31:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:48 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 387.932983] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 17) 02:31:49 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 388.188814] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17) 02:31:49 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) [ 388.241062] FAT-fs (loop3): Filesystem has been set read-only 02:31:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 388.392093] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 388.618185] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 388.647537] FAT-fs (loop3): Filesystem has been set read-only 02:31:49 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) 02:31:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 388.810944] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17) 02:31:50 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(r4, 0x407, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) 02:31:50 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 389.330392] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 389.360009] FAT-fs (loop1): Filesystem has been set read-only 02:31:50 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 389.480708] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17) 02:31:50 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) 02:31:50 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:51 executing program 3: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:51 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(r4, 0x407, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) 02:31:51 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:51 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) [ 390.544376] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) 02:31:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 390.599137] FAT-fs (loop0): Filesystem has been set read-only 02:31:51 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 390.761778] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) 02:31:51 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(r4, 0x407, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) [ 391.044881] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17) 02:31:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 391.107654] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 391.130327] FAT-fs (loop1): Filesystem has been set read-only [ 391.145108] FAT-fs (loop0): Filesystem has been set read-only 02:31:52 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 391.260872] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17) 02:31:52 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) [ 391.587138] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 391.691536] FAT-fs (loop1): Filesystem has been set read-only 02:31:52 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) 02:31:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:53 executing program 3: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:53 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:53 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) [ 392.317115] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 392.376110] FAT-fs (loop3): Filesystem has been set read-only 02:31:53 executing program 3: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 392.500892] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17) 02:31:53 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) [ 392.864439] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF 02:31:53 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 392.930531] FAT-fs (loop3): Filesystem has been set read-only 02:31:54 executing program 3: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:54 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) 02:31:54 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 393.283813] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 17) [ 393.337170] FAT-fs (loop3): Filesystem has been set read-only 02:31:54 executing program 3: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 393.471380] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 17) 02:31:54 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) 02:31:54 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:55 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) 02:31:55 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:55 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) [ 394.698329] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 394.767060] FAT-fs (loop0): Filesystem has been set read-only 02:31:55 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 394.913495] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) 02:31:56 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:56 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) [ 395.272820] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 17) [ 395.308083] FAT-fs (loop0): Filesystem has been set read-only 02:31:56 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 395.481333] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 17) 02:31:56 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) 02:31:56 executing program 3: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:56 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) [ 395.805616] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 395.836709] FAT-fs (loop0): Filesystem has been set read-only 02:31:56 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 395.951249] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 395.969935] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 21) 02:31:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) fchdir(0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 396.004367] FAT-fs (loop3): Filesystem has been set read-only [ 396.071862] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 21) [ 396.117292] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 21) [ 396.158677] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 21) 02:31:57 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 396.245750] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 21) [ 396.303740] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 21) [ 396.350258] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 21) [ 396.414934] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 21) 02:31:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) [ 396.465600] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 21) [ 396.507767] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 21) 02:31:57 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) [ 396.577265] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 21) 02:31:57 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 396.653348] audit: type=1800 audit(1581215517.675:131): pid=14298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed" comm="syz-executor.3" name="memory.events" dev="loop3" ino=282 res=0 02:31:57 executing program 3: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:58 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:58 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141242, 0x0) ftruncate(r0, 0x88001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x3, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x400c01, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0xd40}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000100)={r4, r5, 0x132}) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000140)=0x102, 0x4) sendfile(r1, r2, 0x0, 0x4e68d5f8) 02:31:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) fchdir(0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 397.117334] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 397.126943] audit: type=1804 audit(1581215518.145:132): pid=14339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir399911633/syzkaller.DbDTpE/77/bus" dev="sda1" ino=17193 res=1 [ 397.185512] FAT-fs (loop3): Filesystem has been set read-only [ 397.260715] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 397.269026] FAT-fs (loop0): Filesystem has been set read-only 02:31:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:58 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) 02:31:58 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:58 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x2}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) [ 397.451256] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 397.499416] audit: type=1804 audit(1581215518.525:133): pid=14339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir399911633/syzkaller.DbDTpE/77/bus" dev="sda1" ino=17193 res=1 02:31:58 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141242, 0x0) ftruncate(r0, 0x88001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x3, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x400c01, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0xd40}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000100)={r4, r5, 0x132}) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000140)=0x102, 0x4) sendfile(r1, r2, 0x0, 0x4e68d5f8) [ 397.613943] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 397.646422] FAT-fs (loop3): Filesystem has been set read-only 02:31:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 397.721538] audit: type=1804 audit(1581215518.755:134): pid=14376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir399911633/syzkaller.DbDTpE/78/bus" dev="sda1" ino=17200 res=1 [ 397.790781] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 397.832880] FAT-fs (loop0): Filesystem has been set read-only 02:31:58 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:58 executing program 5: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 398.120726] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 398.168324] FAT-fs (loop3): Filesystem has been set read-only 02:31:59 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) fchdir(0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:59 executing program 5: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:59 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) 02:31:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:31:59 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) [ 398.285188] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 398.310664] FAT-fs (loop0): Filesystem has been set read-only [ 398.350612] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17) 02:31:59 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 398.465100] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 398.523762] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.728215] batman_adv: batadv0: Removing interface: batadv_slave_0 02:31:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 398.805383] ================================================================== [ 398.813157] BUG: KASAN: use-after-free in batadv_iv_ogm_queue_add+0x2c2/0xe30 [ 398.820445] Read of size 60 at addr ffff8880a0dd5700 by task kworker/u4:6/7497 [ 398.827804] [ 398.829435] CPU: 1 PID: 7497 Comm: kworker/u4:6 Not tainted 4.14.170-syzkaller #0 [ 398.837051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 398.846418] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 398.853526] Call Trace: [ 398.856120] dump_stack+0x142/0x197 [ 398.859753] ? batadv_iv_ogm_queue_add+0x2c2/0xe30 [ 398.864688] print_address_description.cold+0x7c/0x1dc [ 398.869971] ? batadv_iv_ogm_queue_add+0x2c2/0xe30 [ 398.874905] kasan_report.cold+0xa9/0x2af [ 398.879058] check_memory_region+0x123/0x190 [ 398.883466] memcpy+0x24/0x50 [ 398.886579] batadv_iv_ogm_queue_add+0x2c2/0xe30 [ 398.891344] ? lock_acquire+0x16f/0x430 [ 398.895331] ? check_preemption_disabled+0x3c/0x250 [ 398.900355] batadv_iv_ogm_schedule+0xa61/0xe20 [ 398.905036] batadv_iv_send_outstanding_bat_ogm_packet+0x4a1/0x680 [ 398.911472] process_one_work+0x863/0x1600 [ 398.915723] ? pwq_dec_nr_in_flight+0x2e0/0x2e0 [ 398.920399] worker_thread+0x5d9/0x1050 [ 398.924385] kthread+0x319/0x430 [ 398.927748] ? process_one_work+0x1600/0x1600 [ 398.932242] ? kthread_create_on_node+0xd0/0xd0 [ 398.936915] ret_from_fork+0x24/0x30 [ 398.940631] [ 398.942327] Allocated by task 7497: [ 398.946004] save_stack_trace+0x16/0x20 [ 398.949978] save_stack+0x45/0xd0 [ 398.953452] kasan_kmalloc+0xce/0xf0 [ 398.957164] __kmalloc+0x15d/0x7a0 [ 398.960777] batadv_tvlv_container_ogm_append+0x12b/0x480 [ 398.966330] batadv_iv_ogm_schedule+0xba0/0xe20 [ 398.971010] batadv_iv_send_outstanding_bat_ogm_packet+0x4a1/0x680 [ 398.977336] process_one_work+0x863/0x1600 [ 398.981582] worker_thread+0x5d9/0x1050 [ 398.985562] kthread+0x319/0x430 [ 398.988931] ret_from_fork+0x24/0x30 [ 398.992638] [ 398.994265] Freed by task 2354: [ 398.997543] save_stack_trace+0x16/0x20 [ 399.001516] save_stack+0x45/0xd0 [ 399.004969] kasan_slab_free+0x75/0xc0 [ 399.008853] kfree+0xcc/0x270 [ 399.011968] batadv_iv_ogm_iface_disable+0x39/0x80 [ 399.016895] batadv_hardif_disable_interface.cold+0x605/0x840 [ 399.022795] batadv_softif_destroy_netlink+0xad/0x140 [ 399.028054] default_device_exit_batch+0x22c/0x3d0 [ 399.032993] ops_exit_list.isra.0+0xfc/0x150 [ 399.037399] cleanup_net+0x3ba/0x870 [ 399.041111] process_one_work+0x863/0x1600 [ 399.045342] worker_thread+0x5d9/0x1050 [ 399.049311] kthread+0x319/0x430 [ 399.052676] ret_from_fork+0x24/0x30 [ 399.056381] [ 399.058010] The buggy address belongs to the object at ffff8880a0dd5700 [ 399.058010] which belongs to the cache kmalloc-64 of size 64 [ 399.070493] The buggy address is located 0 bytes inside of [ 399.070493] 64-byte region [ffff8880a0dd5700, ffff8880a0dd5740) [ 399.082137] The buggy address belongs to the page: [ 399.087096] page:ffffea0002837540 count:1 mapcount:0 mapping:ffff8880a0dd5000 index:0xffff8880a0dd5f80 [ 399.096694] flags: 0xfffe0000000100(slab) [ 399.100864] raw: 00fffe0000000100 ffff8880a0dd5000 ffff8880a0dd5f80 000000010000001e [ 399.108754] raw: ffffea00022a69a0 ffffea000281ed20 ffff8880aa800340 0000000000000000 [ 399.116638] page dumped because: kasan: bad access detected [ 399.122351] [ 399.123976] Memory state around the buggy address: [ 399.128906] ffff8880a0dd5600: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 399.136271] ffff8880a0dd5680: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 399.143656] >ffff8880a0dd5700: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 399.151014] ^ [ 399.154392] ffff8880a0dd5780: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 399.161755] ffff8880a0dd5800: 00 00 00 00 00 00 00 06 fc fc fc fc fc fc fc fc [ 399.169119] ================================================================== [ 399.176485] Disabling lock debugging due to kernel taint 02:32:00 executing program 1: r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/225, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:32:00 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'syzkaller1\x00'}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) 02:32:00 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) [ 399.244046] Kernel panic - not syncing: panic_on_warn set ... [ 399.244046] [ 399.251466] CPU: 1 PID: 7497 Comm: kworker/u4:6 Tainted: G B 4.14.170-syzkaller #0 [ 399.260310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 399.269675] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 399.276775] Call Trace: [ 399.279364] dump_stack+0x142/0x197 [ 399.282994] ? batadv_iv_ogm_queue_add+0x2c2/0xe30 [ 399.287985] panic+0x1f9/0x42d [ 399.291191] ? add_taint.cold+0x16/0x16 [ 399.295321] ? ___preempt_schedule+0x16/0x18 [ 399.299737] kasan_end_report+0x47/0x4f [ 399.303714] kasan_report.cold+0x130/0x2af [ 399.307956] check_memory_region+0x123/0x190 [ 399.312364] memcpy+0x24/0x50 [ 399.315481] batadv_iv_ogm_queue_add+0x2c2/0xe30 [ 399.320241] ? lock_acquire+0x16f/0x430 [ 399.324214] ? check_preemption_disabled+0x3c/0x250 [ 399.329232] batadv_iv_ogm_schedule+0xa61/0xe20 [ 399.333905] batadv_iv_send_outstanding_bat_ogm_packet+0x4a1/0x680 [ 399.340227] process_one_work+0x863/0x1600 02:32:00 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x402600, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) [ 399.344470] ? pwq_dec_nr_in_flight+0x2e0/0x2e0 [ 399.349147] worker_thread+0x5d9/0x1050 [ 399.353124] kthread+0x319/0x430 [ 399.356489] ? process_one_work+0x1600/0x1600 [ 399.360976] ? kthread_create_on_node+0xd0/0xd0 [ 399.365641] ret_from_fork+0x24/0x30 [ 399.371174] Kernel Offset: disabled [ 399.374895] Rebooting in 86400 seconds..