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"}, &(0x7f00000012c0)=0x1008) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000001300)={r3, 0x2}, 0x8) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001340)='/dev/zero\x00', 0x13ddb0b40816f6f6, 0x0) accept4$alg(r4, 0x0, 0x0, 0x80000) r5 = syz_open_dev$midi(&(0x7f0000001380)='/dev/midi#\x00', 0x3, 0x10181) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r5, 0x28, 0x0, &(0x7f00000013c0)=0x1, 0x8) semctl$SEM_INFO(0xffffffffffffffff, 0x4, 0x13, &(0x7f0000001400)=""/254) syz_open_dev$vbi(&(0x7f0000001500)='/dev/vbi#\x00', 0x0, 0x2) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000001540)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000001580)={r3, @in={{0x2, 0x4e20, @multicast1}}, 0x9, 0x2, 0x8001, 0x1, 0x271a}, &(0x7f0000001640)=0x98) setsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000001680)=@assoc_value={r7, 0x7}, 0x8) r8 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/mixer\x00', 0x800, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001700)=0x0) fcntl$setown(r8, 0x8, r9) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000001740)) socket$inet6_dccp(0xa, 0x6, 0x0) r10 = syz_open_dev$swradio(&(0x7f0000001780)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f00000017c0)={0x80, 0x8, 0x2, 0x0, 0x0}, &(0x7f0000001800)=0x10) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r10, 0x84, 0x10, &(0x7f0000001840)=@sack_info={r11, 0x8, 0xc8}, &(0x7f0000001880)=0xc) r12 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000018c0)='/dev/dlm_plock\x00', 0x4000, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r12, 0x80045515, &(0x7f0000001900)={0x0, 0x1}) r13 = syz_open_dev$vcsn(&(0x7f0000001940)='/dev/vcs#\x00', 0xb181, 0x100000) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r13, 0x84, 0x12, &(0x7f0000001980)=0x78, 0x4) r14 = syz_open_dev$amidi(&(0x7f00000019c0)='/dev/amidi#\x00', 0x4, 0x100) r15 = fcntl$dupfd(0xffffffffffffffff, 0x80c, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r14, r15, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001a40)=[@text32={0x20, &(0x7f0000001a00)="c4e2f9228c9b66744830260f79cd0f78f1c4e17828dd2e6467650fc72f36f2a7f081070f0000000f0016b9620a00000f320f205e", 0x34}], 0x1, 0x48, &(0x7f0000001a80), 0x0) 15:10:55 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) 15:10:55 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400), &(0x7f00000004c0)=0xc) lstat(0x0, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x3b) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x200000, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000001080)='./file0/../file0/file0\x00') lsetxattr$system_posix_acl(&(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x4, 0x0) umount2(&(0x7f0000000080)='./file0/../file0/file0\x00', 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000600)={'team_slave_0\x00'}) getdents(0xffffffffffffffff, 0x0, 0x0) tkill(0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000740)={{{@in6=@ipv4={[], [], @rand_addr=0x6}, @in=@remote, 0x4e24, 0x0, 0x4e21, 0x0, 0xa, 0x170}, {0x0, 0xfffffffffffffffa, 0xfff, 0x0, 0x2, 0x9, 0x0, 0x4}, {0x0, 0x0, 0x6, 0x8000}, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@multicast2, 0x0, 0x2, 0x0, 0x1, 0x7, 0x0, 0x1}}, 0xe8) 15:10:55 executing program 2: r0 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r0, &(0x7f0000000240)="b156d417452c8f6d46edb3b1077f2abaa85e3489c66107abcc617d9aeb42aa515f23c9150bfdba5fa1be4e0415cb2c2d4a1cdff5ab24d3676cc093ea0ffa364b7e", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000000200), 0xff8) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r1, 0x0, 0xe379, 0x4003fe) r2 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$unix(0x1, 0x0, 0x0) open(0x0, 0x141042, 0x0) r3 = creat(0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x4900) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='Z\x00') 15:10:55 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./control\x00', 0x0) rmdir(&(0x7f0000000040)='./control\x00') [ 133.826367] audit: type=1400 audit(1570461055.174:37): avc: denied { map } for pid=6879 comm="syz-fuzzer" path="/root/syzkaller-shm744422351" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 133.911432] audit: type=1400 audit(1570461055.194:38): avc: denied { map } for pid=6897 comm="syz-executor.5" path="/sys/kernel/debug/kcov" dev="debugfs" ino=22 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 134.230941] IPVS: ftp: loaded support on port[0] = 21 [ 135.048948] chnl_net:caif_netlink_parms(): no params data found [ 135.057437] IPVS: ftp: loaded support on port[0] = 21 [ 135.092101] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.098733] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.106038] device bridge_slave_0 entered promiscuous mode [ 135.113239] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.119726] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.126840] device bridge_slave_1 entered promiscuous mode [ 135.156529] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 135.167030] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 135.188638] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 135.196040] team0: Port device team_slave_0 added [ 135.201698] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 135.208943] team0: Port device team_slave_1 added [ 135.214493] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 135.215118] IPVS: ftp: loaded support on port[0] = 21 [ 135.221906] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 135.291995] device hsr_slave_0 entered promiscuous mode [ 135.330321] device hsr_slave_1 entered promiscuous mode [ 135.370722] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 135.377893] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 135.415234] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.421716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.428500] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.434917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.452096] IPVS: ftp: loaded support on port[0] = 21 [ 135.533602] chnl_net:caif_netlink_parms(): no params data found [ 135.578519] chnl_net:caif_netlink_parms(): no params data found [ 135.591994] IPVS: ftp: loaded support on port[0] = 21 [ 135.653993] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.660516] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.667478] device bridge_slave_0 entered promiscuous mode [ 135.675068] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.681641] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.688668] device bridge_slave_1 entered promiscuous mode [ 135.732502] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 135.741762] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 135.749580] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.756251] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.764574] device bridge_slave_0 entered promiscuous mode [ 135.773196] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.779566] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.786714] device bridge_slave_1 entered promiscuous mode [ 135.808679] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 135.815884] team0: Port device team_slave_0 added [ 135.838618] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 135.846765] IPVS: ftp: loaded support on port[0] = 21 [ 135.847695] team0: Port device team_slave_1 added [ 135.887079] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 135.894572] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 135.903093] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 135.912464] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 135.924207] chnl_net:caif_netlink_parms(): no params data found [ 135.954545] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 135.960786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.013273] device hsr_slave_0 entered promiscuous mode [ 136.050450] device hsr_slave_1 entered promiscuous mode [ 136.097171] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 136.104587] team0: Port device team_slave_0 added [ 136.110977] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 136.118055] team0: Port device team_slave_1 added [ 136.127282] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 136.134677] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.152122] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.159146] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 136.172296] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 136.184434] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 136.192275] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 136.201727] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 136.213892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 136.222213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 136.229475] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 136.266629] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.273380] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.280816] device bridge_slave_0 entered promiscuous mode [ 136.352200] device hsr_slave_0 entered promiscuous mode [ 136.391060] device hsr_slave_1 entered promiscuous mode [ 136.431518] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 136.437671] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.444076] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.452035] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.459178] device bridge_slave_1 entered promiscuous mode [ 136.477513] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 136.497280] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 136.509905] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 136.518839] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 136.548155] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 136.555919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 136.565155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 136.573088] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.579446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.588155] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 136.596311] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 136.605896] chnl_net:caif_netlink_parms(): no params data found [ 136.615129] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 136.622514] team0: Port device team_slave_0 added [ 136.628066] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 136.635448] team0: Port device team_slave_1 added [ 136.648686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 136.657165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 136.665229] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.671730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.681305] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 136.691366] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 136.701815] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 136.722967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 136.734612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 136.744750] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 136.754390] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 136.763350] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 136.808413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 136.816917] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 136.824799] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 136.902691] device hsr_slave_0 entered promiscuous mode [ 136.940503] device hsr_slave_1 entered promiscuous mode [ 137.019135] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 137.032187] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.038662] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.047256] device bridge_slave_0 entered promiscuous mode [ 137.054066] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 137.063791] chnl_net:caif_netlink_parms(): no params data found [ 137.081838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 137.091117] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 137.100219] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 137.108585] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 137.115715] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.122345] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.129350] device bridge_slave_1 entered promiscuous mode [ 137.135895] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 137.151323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 137.159316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 137.167376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 137.175173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 137.191445] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 137.197672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 137.217665] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 137.228388] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 137.246293] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 137.275688] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 137.283911] team0: Port device team_slave_0 added [ 137.293713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.303551] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.311384] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.318378] device bridge_slave_0 entered promiscuous mode [ 137.327075] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 137.334831] team0: Port device team_slave_1 added [ 137.340412] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 137.347748] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 137.356924] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 137.365991] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.372609] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.379737] device bridge_slave_1 entered promiscuous mode [ 137.395490] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 137.455226] device hsr_slave_0 entered promiscuous mode [ 137.510475] device hsr_slave_1 entered promiscuous mode [ 137.571449] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 137.579217] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 137.591220] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 137.608888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.618269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.629085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.639977] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 137.646305] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.654229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.663255] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 137.672877] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 137.683953] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 137.693552] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 137.708223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 137.717203] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 137.725052] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.731436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.739459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 137.748421] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 137.758459] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 137.764812] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.777775] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 137.785165] team0: Port device team_slave_0 added [ 137.791937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.799234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.808755] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 137.818342] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 137.829201] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 137.836959] team0: Port device team_slave_1 added [ 137.842547] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 137.849786] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 137.859070] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 137.867305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 137.875607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 137.883599] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.889988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.897563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 137.906338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 137.914461] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.920867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.938691] audit: type=1400 audit(1570461059.284:39): avc: denied { create } for pid=6931 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 137.939293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 137.978714] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 137.986142] audit: type=1400 audit(1570461059.324:40): avc: denied { write } for pid=6931 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 137.989656] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready 15:10:59 executing program 5: getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mount$9p_virtio(0x0, 0x0, &(0x7f0000000380)='9p\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000001080)='./file0/../file0/file0\x00') umount2(&(0x7f0000000080)='./file0/../file0/file0\x00', 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000600)={'team_slave_0\x00', 0x5000}) getdents(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0) [ 138.022701] audit: type=1400 audit(1570461059.324:41): avc: denied { read } for pid=6931 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 138.063168] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 138.083379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 138.094953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 138.102907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 138.110964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 138.118586] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.125000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.134594] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 138.153873] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 138.162785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 138.171076] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 138.178767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 15:10:59 executing program 5: getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mount$9p_virtio(0x0, 0x0, &(0x7f0000000380)='9p\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000001080)='./file0/../file0/file0\x00') umount2(&(0x7f0000000080)='./file0/../file0/file0\x00', 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000600)={'team_slave_0\x00', 0x5000}) getdents(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0) [ 138.189282] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready 15:10:59 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x80000, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000040)) [ 138.233506] device hsr_slave_0 entered promiscuous mode [ 138.272538] device hsr_slave_1 entered promiscuous mode [ 138.310801] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 138.319721] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 138.327817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 138.335802] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 138.345689] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready 15:10:59 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'erspan0\x00', 0x2}, 0x18) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x0, @remote}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @multicast2}}) ioctl(r0, 0x8936, &(0x7f0000000000)) [ 138.355129] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 138.363790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.371345] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 138.387738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.404562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 138.413209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 138.427372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 138.437648] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 138.450876] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 138.458527] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 138.469757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 138.478096] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 138.486079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 138.495099] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 138.503080] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 138.511902] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 138.517975] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 138.528716] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 138.538878] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 138.549833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 138.557947] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 138.566407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 138.575275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 138.584290] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 138.592053] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 138.600958] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready 15:11:00 executing program 5: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x80000) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x313, 0x0}, 0xfffffffffffffe33) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x100, 0x2) sendto$inet(0xffffffffffffffff, &(0x7f0000000380)="08958fa10b18a2421366cee1bf9b7a4055fa3fd18a411a7ea62a371525aa36535b1c447725d68f51a2d0d8381c8453bc54927135f4da15770c572051954e87db8d99fff6656f30a5bc64253e030d72894a7e7410329eb2e69ca3000f2e31a59254d5fa41ffc1b96bcf5b678d15f251b1e383b6699f000c3d0dcfd9bf65c98302bf1bca9b49b4c5cf5f268dae96dfcab545af0916784c8cd50ee1e4f0eb830c6fd7bc0a6a4933eed673fac6a2bd694f7a2a615bf5764142ae47ec682dc333332e2f2ea35b4b517ea02522ab", 0xcb, 0x0, 0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x0) r5 = socket(0x1000000010, 0x400000400080803, 0x0) r6 = dup(r5) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, 0x0, 0x0) open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, 0x0, 0x0, 0x0, 0x4123b79bef9aec01, 0x0, 0x20000}) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) r7 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[.\xf6\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+\x8d\xed\xa6\\\x1c\xc3\x97\x94\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4\xc4\x88C\xa2B\x8b\x81\v\xea\t\xf0\x8fw\a\f\x15\xe2\xd0q\xbb\r\x17`s\xec\x85>\xcf\xab9(\xf6.\x15\xcd2-\xf2\xc4\xd8\x00a\xd5\xd9\xb5Z\xd7\xb4\xac\x1d_+k\xd6\x8ag\xdceHE\xd5\x1c\x8a\xbd#\xcc\x82\xca\xc2(\xb6\xe1\x99p\x9b\xa3D\xd2\x91\x96\xef\x05\fv\x16\x14\xcc\xea\x9d\x11w\x1e\xb5VG\x9ad\x9a`=^h\x8c8\xc9\"\x1eO\xb5vk\xc9\xcfi\x90\xd7\xd3H\xa1\xb4\xda\v\x17\x95\xf7\x19\x99\x99\x92\xc3\xc0\x8a\x18\xc7\"g\xd7B\x8f\x85\x18\xf3\x02\xa7\xb6\x83\x92\xefY\xef\x85\x92\x10E\x18\xbc\xacy\xd6\xa7Wh\xcd\xd0\xfa\xcc\xde\xeb\xdf\xad\xfd\xb0\xee\xfb\xc2(\x8cj\xd0uj{4\xb2\xe1p\x88u6\x9a;\xaa\x9f+J\x9e\xe3\xcc\xc7O\xad\x84\x8c;\x92~,\x15\xb2\x97\f~\xa0W\x16\x8b\a\x88\xaa\xe4C\xaf\x90\xdf\x7f\xe51\x00/n\xb5f\x1a\x8c+\xea<\xe3N@\x9e\xec\xbe{\x90x\xc6\x95!\xea\x11\xda\xe1I\x1d\xcbY\xe1\x01\xd2d\xae\xd1(>\xa3\xa9\x93\x16\xc6G\x94|', 0x2761, 0x0) write$cgroup_pid(r8, &(0x7f0000000080), 0xfffffe38) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) sendmmsg(r7, 0x0, 0x0, 0x0) r9 = socket(0x0, 0x0, 0x0) dup(r9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 138.607110] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.615734] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 138.625273] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 138.633831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 138.644266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 138.657190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 138.665844] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 138.675894] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 138.685316] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 138.703406] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 138.711182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 138.719773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 138.728359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 138.736051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 138.743807] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 138.751820] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.758892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.766142] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.778978] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 138.788969] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 138.795661] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.804221] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 138.814337] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 138.824298] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 138.853928] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 138.866921] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 138.877490] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 138.888377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 138.900296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 138.920356] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.926970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.934469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 138.942670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 138.951123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 138.961317] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 138.968868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 138.977075] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 138.986199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 138.994284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.006235] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 139.016847] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 139.024665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 139.032756] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.041106] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.047672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.056146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 139.064710] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 139.073770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.081941] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 139.090927] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 139.097793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.106391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.114407] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.121050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.128838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 139.136857] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.147094] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 139.157494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 139.166794] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 139.173197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 139.184586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.193353] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 139.202550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 139.219911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.229649] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 139.242324] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 139.256308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 139.263817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 139.275565] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 139.284244] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 139.291118] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.298948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 139.307598] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.316080] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 139.329965] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 139.339466] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 139.349003] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 139.356606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.372200] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.386300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 139.394300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.402272] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.409023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.416253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 139.425089] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 139.434984] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 139.443082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 139.452352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.464061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.472303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.480268] bridge0: port 2(bridge_slave_1) entered blocking state 15:11:00 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:11:00 executing program 5: r0 = socket(0x1, 0x1, 0x0) timer_create(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) getsockopt(r0, 0x0, 0x0, 0x0, &(0x7f00000002c0)) [ 139.486720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.549590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.569633] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 139.608494] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 139.622575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 139.633049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 139.646093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 15:11:01 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @empty}, 0x1c) [ 139.666526] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 139.684393] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 139.699267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 139.717946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 139.728983] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 139.745988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 139.754899] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.774128] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 139.786426] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 139.796112] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 139.805024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.813291] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.828099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.852321] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 139.867952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 139.880604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.890843] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 139.899504] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 139.917882] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 139.924578] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 139.932765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 139.941269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.956031] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 139.969291] 8021q: adding VLAN 0 to HW filter on device batadv0 15:11:01 executing program 1: 15:11:01 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @remote}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x3}}]}, 0x40}, 0x1, 0x1300}, 0x0) [ 140.722009] audit: type=1400 audit(1570461062.064:42): avc: denied { map } for pid=7026 comm="syz-executor.2" path=2F6D656D66643A2D42D54E49C56ABA707070F00884A26D202864656C6574656429 dev="tmpfs" ino=26271 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmpfs_t:s0 tclass=file permissive=1 15:11:02 executing program 2: 15:11:02 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:11:02 executing program 0: seccomp(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xfffffffffffffffb}]}) sync() 15:11:02 executing program 1: 15:11:02 executing program 5: 15:11:02 executing program 3: 15:11:02 executing program 2: 15:11:02 executing program 3: 15:11:02 executing program 1: 15:11:02 executing program 2: 15:11:02 executing program 5: 15:11:02 executing program 3: 15:11:02 executing program 1: 15:11:02 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) [ 140.904710] audit: type=1326 audit(1570461062.254:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=7036 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0xffff0000 15:11:03 executing program 0: 15:11:03 executing program 2: 15:11:03 executing program 1: 15:11:03 executing program 3: 15:11:03 executing program 5: 15:11:03 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) [ 141.632441] audit: type=1326 audit(1570461062.984:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=7036 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0xffff0000 15:11:03 executing program 2: 15:11:03 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) syz_mount_image$msdos(&(0x7f0000000240)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@gid={'gid'}}]}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 15:11:03 executing program 3: prlimit64(0x0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x2b) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in=@empty, 0x0, 0x4, 0x0, 0x2}}, 0xe8) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0}}], 0x400000000000107, 0x0) 15:11:03 executing program 1: 15:11:03 executing program 0: 15:11:03 executing program 2: 15:11:03 executing program 0: 15:11:03 executing program 1: 15:11:03 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:11:03 executing program 2: 15:11:03 executing program 0: 15:11:03 executing program 2: 15:11:03 executing program 1: [ 141.881129] FAT-fs (loop5): bogus number of reserved sectors [ 141.906062] FAT-fs (loop5): Can't find a valid FAT filesystem 15:11:03 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) syz_mount_image$msdos(&(0x7f0000000240)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@gid={'gid'}}]}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 142.016276] FAT-fs (loop5): bogus number of reserved sectors [ 142.038925] FAT-fs (loop5): Can't find a valid FAT filesystem 15:11:03 executing program 3: 15:11:03 executing program 0: 15:11:03 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:11:03 executing program 1: 15:11:03 executing program 2: 15:11:03 executing program 1: 15:11:03 executing program 3: 15:11:03 executing program 0: 15:11:03 executing program 2: 15:11:03 executing program 0: 15:11:03 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) [ 142.228378] FAT-fs (loop5): bogus number of reserved sectors [ 142.266319] FAT-fs (loop5): Can't find a valid FAT filesystem 15:11:03 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) syz_mount_image$msdos(&(0x7f0000000240)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@gid={'gid'}}]}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 15:11:03 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) 15:11:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x40, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffffffffffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000aabff1)='net/ipv6_route\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 15:11:03 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) 15:11:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x90) fcntl$setstatus(r2, 0x4, 0x80000000002c00) fcntl$dupfd(r1, 0x406, r2) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x840) getpeername$unix(r3, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) 15:11:03 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:11:03 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:11:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x200, 0x10000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x332, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000180), 0xc, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000280)) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="8000ffff08b7960ff7f96e041aefb1ebea7e7de8e703000000d8fc279f7c1deadb2487d9b2d074101b09cfb5fe9f187d95a3affbf6819470c5d50ac302f4e7dd1a81a1d7ee31d9555d202e92514e871cd8202365860987d28b37167ba1ca8a7346f66c92ddf83f0a60de117b4ca7"], 0x6e) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={r3}, 0x8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000580)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) 15:11:03 executing program 3: fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x90) fcntl$setstatus(r0, 0x4, 0x80000000002c00) fcntl$getown(r0, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000180)=@buf={0x0, &(0x7f0000000380)}) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sysinfo(&(0x7f0000000040)=""/22) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f00000006c0)='trusted\x00', &(0x7f0000000700)={'syz', 0x2}, 0x0, 0xfffffffffffffffc) request_key(&(0x7f0000000780)='user\x00', &(0x7f00000007c0)={'syz', 0x3}, &(0x7f0000000800)='eth1cpuset\x1c\x00', 0xfffffffffffffffd) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_GET_TIMERSLACK(0x1e) fstat(0xffffffffffffffff, 0x0) fcntl$getown(r2, 0x9) sched_rr_get_interval(0x0, &(0x7f0000000040)) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x302) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, 0x0, 0x4000801) r4 = accept$ax25(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @default}, [@netrom, @null, @default, @default, @bcast, @rose, @null, @rose]}, &(0x7f0000000000)=0x48) connect$ax25(r4, &(0x7f0000000380)={{0x3, @bcast, 0x4}, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000340)=[&(0x7f0000000100)='/dev/loop-control\x00', &(0x7f0000000140)='\xc9(%\x06*security^/\x00', &(0x7f0000000300)='\x00'], &(0x7f0000000640)) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r5) [ 142.464289] FAT-fs (loop5): bogus number of reserved sectors [ 142.495653] FAT-fs (loop5): Can't find a valid FAT filesystem 15:11:03 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:11:03 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) syz_mount_image$msdos(&(0x7f0000000240)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@gid={'gid'}}]}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 142.613403] hrtimer: interrupt took 34549 ns 15:11:04 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:11:04 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x1801}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ppoll(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x3) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x8b1dbd0f) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f00000001c0)=0x2, 0x183) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x1000000000000003, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)) inotify_init1(0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) sendto$packet(r1, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'irlan0\x00'}) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f00000000c0)) [ 142.705692] FAT-fs (loop5): bogus number of reserved sectors [ 142.763864] FAT-fs (loop5): Can't find a valid FAT filesystem 15:11:04 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:11:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x200, 0x10000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x332, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000180), 0xc, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000280)) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="8000ffff08b7960ff7f96e041aefb1ebea7e7de8e703000000d8fc279f7c1deadb2487d9b2d074101b09cfb5fe9f187d95a3affbf6819470c5d50ac302f4e7dd1a81a1d7ee31d9555d202e92514e871cd8202365860987d28b37167ba1ca8a7346f66c92ddf83f0a60de117b4ca7"], 0x6e) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={r3}, 0x8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000580)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) [ 142.942426] syz-executor.1 (7188) used greatest stack depth: 24048 bytes left 15:11:04 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:11:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x90) fcntl$setstatus(r2, 0x4, 0x80000000002c00) fcntl$dupfd(r1, 0x406, r2) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x840) getpeername$unix(r3, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) 15:11:04 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:11:04 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x200, 0x10000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x332, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000180), 0xc, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000280)) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="8000ffff08b7960ff7f96e041aefb1ebea7e7de8e703000000d8fc279f7c1deadb2487d9b2d074101b09cfb5fe9f187d95a3affbf6819470c5d50ac302f4e7dd1a81a1d7ee31d9555d202e92514e871cd8202365860987d28b37167ba1ca8a7346f66c92ddf83f0a60de117b4ca7"], 0x6e) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={r3}, 0x8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000580)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) 15:11:04 executing program 3: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x801, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) r1 = open(&(0x7f0000000400)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x10081, 0x0) ioctl$TIOCLINUX2(r2, 0x541c, &(0x7f0000000140)={0x2, 0x7, 0x9, 0x0, 0x2, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x100}, 0x20048001) [ 143.356250] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 143.374186] FAT-fs (loop1): Filesystem has been set read-only [ 143.381333] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 143.510839] audit: type=1804 audit(1570461064.854:45): pid=7265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir684005504/syzkaller.GjcBj4/14/file0" dev="sda1" ino=16575 res=1 15:11:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) fcntl$notify(0xffffffffffffffff, 0x402, 0xc) sendto$inet(r0, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) ftruncate(0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f00000001c0)={0x3, 0x5, 0x4, 0xfffffffd, 0x0, 0xffff}) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$IPT_SO_GET_ENTRIES(r5, 0x0, 0x41, &(0x7f0000000100)={'raw\x00', 0x47, "dbc96fd6e0d6e34198fdb839751ab77a5caae0dce963e2770d8733fc087d42158c52a0f4b7a06374c0cd0103b99f9cb0cddaa39f615be5cfbbaea495282c119fb75ae7f55c6826"}, &(0x7f0000000180)=0x6b) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), r3) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r7 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r8, 0x40087703, 0x100000002) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r8, 0x0) dup2(r8, r6) preadv(r7, &(0x7f00000017c0), 0x199, 0x0) 15:11:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) syz_read_part_table(0x7, 0x2, &(0x7f0000000380)=[{&(0x7f00000001c0)="d258ba2b322ddbac91aa90cd224116fceb9b1ba0827a1d5084bf0133a9835dd61141898f26edc8c49df011a8159c2a1ab6d301a65c4af0a1c5b9d5192cffa2b708274a51ec59e1513d0cf9b8e7095fb6030b093c9ec5bd7b5c4a6751df50b11afb09de49c8912f76c49f68c6f28d5183d7a1c6067aa1934ffc78be1fc0551bd3b9155fd897061d764f0e23f6f7c99413bbdbaa8d3ff28503a28484b8d6f6a1c36a4b5423ada7077ec324a0412ac1338b1ade935895392d6641458942c3aec0", 0xbf, 0x7f}, {&(0x7f0000000280)="00a1588691d7faa403b1f3d289cfe0b789d570f8322bf3837660c0f6550eee2a827f85673002b2183fbbb173d18534fb82a8f9fb72400401de3b4a36f1adea99fa3361f875c2acbfe95d4b95ed391704f94a6d01e4a72ccc23e4bdde1fb27b49b0c36e5080c021e30104506bf893ce60392fd71af8d07f203775dbeaa7e75f3f8f5ce157b24b2b40ff1c355e11300a4362110b30826d88cf2f06aa6d7575e42f01556446950c69d8185bb68e1c81392c7006aa1860fed05f8067f40e9a2a299e2e2cf3c6ece21eac4b63c6217049adcd683053b59204", 0xd6, 0x7}]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r3 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r4 = shmat(r3, &(0x7f0000fee000/0x2000)=nil, 0x5000) shmdt(r4) r5 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r6 = shmat(r5, &(0x7f0000fee000/0x2000)=nil, 0x5000) shmdt(r6) r7 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r8 = shmat(r7, &(0x7f0000fee000/0x2000)=nil, 0x5000) shmdt(r8) r9 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r10 = shmat(r9, &(0x7f0000fee000/0x2000)=nil, 0x5000) shmdt(r10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup(r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) r15 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) shmat(r15, &(0x7f0000fee000/0x2000)=nil, 0x5000) r16 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) shmat(r16, &(0x7f0000fee000/0x2000)=nil, 0x5000) r17 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r18 = shmat(r17, &(0x7f0000fee000/0x2000)=nil, 0x5000) shmdt(r18) r19 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r20 = shmat(r19, &(0x7f0000fee000/0x2000)=nil, 0x5000) shmdt(r20) r21 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r22 = shmat(r21, &(0x7f0000fee000/0x2000)=nil, 0x5000) shmdt(r22) r23 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r24 = shmat(r23, &(0x7f0000fee000/0x2000)=nil, 0x5000) shmdt(r24) r25 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) shmat(r25, &(0x7f0000fee000/0x2000)=nil, 0x5000) r26 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) shmat(r26, &(0x7f0000fee000/0x2000)=nil, 0x5000) setsockopt$inet6_MCAST_MSFILTER(r14, 0x29, 0x30, &(0x7f0000002240)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=0x0, @ANYRES32=r1, @ANYRES32=0x0, @ANYPTR=&(0x7f0000002140)=ANY=[@ANYRES16=r15, @ANYRES16=r16, @ANYPTR=&(0x7f0000001f80)=ANY=[@ANYRES16, @ANYRESOCT=r18, @ANYBLOB="8a4e560b412ff88b85e6f6dcaaca281a3aaa5724caf46153641ef42ff44d4bf6413b5111101c7cba6653291da2a793c0b893365153ab9ce866a9862b01c8369845e75d5f3ea436e814f14223a19d1b17c3b51fda60b61cbd742447a1beb1d27a9aaf46a6dd3298849f1542ea74097ffc3062c66e956634c60284854c1043bcab301d7dcb1ffa8fb9c21e", @ANYPTR, @ANYRESOCT=0x0, @ANYRESDEC=r20, @ANYRES32=r22, @ANYBLOB="8efdcb8712f1c8cc0401dbc3ab537b76e8abd554fea7bbb10147dc65a81df604b3469a97c1f4234488fec24b7f612a6fa69b0088500bb10baf94706f8be85c8fc62ab677b1ba9efbc8daabd88d4d2a92fb6d33d595f1431592931d80fddacfaf626b759a0afa32ba809f1cc539f204619a9d02e9e38caa396d7272c918328181bd2e8adb99bb14d347ad2bb6b23744350492bd3b8e4ec4e402", @ANYRESOCT=r2], @ANYRESOCT=r1, @ANYBLOB="1c36cf69c8ff5fe85ea7c5a5f7a1c982af5382ed81c5627316b004d29bd5974b7778d2280a4344f3404c7e31c0373e6028d86743f0ee54997e3435589e8fea8891a09e5ac4bfcadb6d853b9637c2b1478e2a3f8f62f245", @ANYRES16, @ANYBLOB="f953b764f40915a88580568f9c087c3f73c2115ccf7d8b3e0b479f7f332cf6ac9409b443112cdf3dc3a3e4ec7ff22cc0315d7be32acf0c99f4b531e3d25c4121922969286c2004ef5caa68ba1042a98af768532b2213ad4b8e8c783313d87a788b9a9d3728636de4ddf977376208", @ANYRES32=0x0, @ANYRESHEX=r24], @ANYPTR64, @ANYRES64=r25, @ANYRES64=r26], 0x8) fcntl$setstatus(r2, 0x4, 0x80000000002c00) r27 = accept(r2, &(0x7f00000003c0)=@xdp, &(0x7f0000000440)=0x80) sendmsg$TIPC_NL_LINK_GET(r27, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x24088000}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0xf4, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_NET={0x30, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200004}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd60}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3ff}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_MEDIA={0x74, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ffffffd}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x48000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x546}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}]}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x80000}, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) recvmmsg(r1, &(0x7f0000000300), 0x400006e, 0x0, 0x0) r28 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/(\xe5j_ctrl\x06', 0x80401, 0x0) ioctl$VIDIOC_QUERYCTRL(r28, 0xc0445624, &(0x7f0000000a40)={0x1, 0x9, "d35064ba6a01026cb3b409a6a881e50a01567ca6296f5b6d1419cc29d29b7acb", 0x2, 0x9, 0x1, 0x7, 0x19}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r30 = dup(r29) ioctl$PERF_EVENT_IOC_ENABLE(r30, 0x8912, 0x400200) ioctl$UI_END_FF_UPLOAD(r30, 0x406855c9, &(0x7f0000000ac0)={0x2, 0xfffffff7, {0x54, 0x4, 0x3f, {0x2, 0x3f}, {0x4, 0x4a3b}, @ramp={0x5, 0x7fff, {0xfff, 0x1, 0xfc01, 0x9}}}, {0x28012e7c4d16219, 0x101, 0xfafd, {0x8000, 0x3f}, {0x6, 0x400}, @rumble={0x80, 0x800}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r32 = dup(r31) ioctl$PERF_EVENT_IOC_ENABLE(r32, 0x8912, 0x400200) r33 = accept4(r32, &(0x7f00000000c0)=@ipx, &(0x7f0000000140)=0x80, 0x80000) ioctl$IMGETVERSION(r33, 0x80044942, &(0x7f0000000180)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r35 = dup(r34) ioctl$PERF_EVENT_IOC_ENABLE(r35, 0x8912, 0x400200) sendto$ax25(r35, &(0x7f0000000b40)="3e1bb2937d72d4b15eb40203314af4c2ca3ffe904da4f472a3b38fcbcf761edff4c17398a56420ab8622c755c76f6609b0d8f4988ddd4df309f866c08915faf1aa6f9522cff4ed3fdc6aadfcecac1de1513f9b2b97ec1e8084b3bb9f0788fa", 0x5f, 0xa4e1d196d53e7e7d, &(0x7f0000000bc0)={{0x3, @bcast, 0x2}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000040)=0x100, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4000000000001b9, 0x0) 15:11:05 executing program 3: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x801, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) r1 = open(&(0x7f0000000400)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x10081, 0x0) ioctl$TIOCLINUX2(r2, 0x541c, &(0x7f0000000140)={0x2, 0x7, 0x9, 0x0, 0x2, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x100}, 0x20048001) 15:11:05 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) [ 144.240338] protocol 88fb is buggy, dev hsr_slave_0 [ 144.245776] protocol 88fb is buggy, dev hsr_slave_1 [ 144.417077] audit: type=1804 audit(1570461065.764:46): pid=7302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir684005504/syzkaller.GjcBj4/15/file0" dev="sda1" ino=16579 res=1 15:11:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r5, 0xc040564b, &(0x7f0000000080)={0x9, 0x0, 0x2025, 0x8, 0x1ff, {0x2, 0x6}, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000000c0)={"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"}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x100005) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 144.473525] syz-executor.5 (7257) used greatest stack depth: 23864 bytes left [ 144.480115] protocol 88fb is buggy, dev hsr_slave_0 [ 144.486186] protocol 88fb is buggy, dev hsr_slave_1 15:11:05 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000180)={0x0, r1+30000000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x8, 0xfff, 0xfc01, 0xffc0, 0x7, 0x2, 0x5, 0x1f, 0x4, 0x40}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 15:11:06 executing program 1: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) r3 = socket$inet(0x2, 0x3, 0x29) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000001440)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 144.702236] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 15:11:06 executing program 5: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000040)=0x2, 0x4) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:11:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x34b7c31a691c5d03}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x0) sysfs$3(0x3) r0 = openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000200)) syz_genetlink_get_family_id$SEG6(0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x6400, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000380), 0x4) ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f0000000680)=ANY=[@ANYBLOB]) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x101000, 0x0) accept4$inet6(r5, &(0x7f0000000180), &(0x7f0000000280)=0x1c, 0x800) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, &(0x7f00000000c0)={0x5, 0x0, 0xff, 0x605}) socketpair$unix(0x1, 0x3, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000600)={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @broadcast}, 0x8, {0x2, 0x0, @broadcast}, 'tunl0\x00'}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f00000001c0)=0x4) accept4(0xffffffffffffffff, &(0x7f0000000580)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x296, 0x0, 0x0, 0x0, 0x4ce]}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$KVM_HAS_DEVICE_ATTR(r8, 0x4018aee3, &(0x7f0000000500)={0x0, 0x80000000, 0x5, &(0x7f0000000400)=0xb1}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 15:11:06 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:11:06 executing program 3: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x801, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) r1 = open(&(0x7f0000000400)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x10081, 0x0) ioctl$TIOCLINUX2(r2, 0x541c, &(0x7f0000000140)={0x2, 0x7, 0x9, 0x0, 0x2, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x100}, 0x20048001) [ 145.200362] protocol 88fb is buggy, dev hsr_slave_0 [ 145.206202] protocol 88fb is buggy, dev hsr_slave_1 15:11:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) syz_read_part_table(0x7, 0x2, &(0x7f0000000380)=[{&(0x7f00000001c0)="d258ba2b322ddbac91aa90cd224116fceb9b1ba0827a1d5084bf0133a9835dd61141898f26edc8c49df011a8159c2a1ab6d301a65c4af0a1c5b9d5192cffa2b708274a51ec59e1513d0cf9b8e7095fb6030b093c9ec5bd7b5c4a6751df50b11afb09de49c8912f76c49f68c6f28d5183d7a1c6067aa1934ffc78be1fc0551bd3b9155fd897061d764f0e23f6f7c99413bbdbaa8d3ff28503a28484b8d6f6a1c36a4b5423ada7077ec324a0412ac1338b1ade935895392d6641458942c3aec0", 0xbf, 0x7f}, {&(0x7f0000000280)="00a1588691d7faa403b1f3d289cfe0b789d570f8322bf3837660c0f6550eee2a827f85673002b2183fbbb173d18534fb82a8f9fb72400401de3b4a36f1adea99fa3361f875c2acbfe95d4b95ed391704f94a6d01e4a72ccc23e4bdde1fb27b49b0c36e5080c021e30104506bf893ce60392fd71af8d07f203775dbeaa7e75f3f8f5ce157b24b2b40ff1c355e11300a4362110b30826d88cf2f06aa6d7575e42f01556446950c69d8185bb68e1c81392c7006aa1860fed05f8067f40e9a2a299e2e2cf3c6ece21eac4b63c6217049adcd683053b59204", 0xd6, 0x7}]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r3 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r4 = shmat(r3, &(0x7f0000fee000/0x2000)=nil, 0x5000) shmdt(r4) r5 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r6 = shmat(r5, &(0x7f0000fee000/0x2000)=nil, 0x5000) shmdt(r6) r7 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r8 = shmat(r7, &(0x7f0000fee000/0x2000)=nil, 0x5000) shmdt(r8) r9 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r10 = shmat(r9, &(0x7f0000fee000/0x2000)=nil, 0x5000) shmdt(r10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup(r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) r15 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) shmat(r15, &(0x7f0000fee000/0x2000)=nil, 0x5000) r16 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) shmat(r16, &(0x7f0000fee000/0x2000)=nil, 0x5000) r17 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r18 = shmat(r17, &(0x7f0000fee000/0x2000)=nil, 0x5000) shmdt(r18) r19 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r20 = shmat(r19, &(0x7f0000fee000/0x2000)=nil, 0x5000) shmdt(r20) r21 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r22 = shmat(r21, &(0x7f0000fee000/0x2000)=nil, 0x5000) shmdt(r22) r23 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r24 = shmat(r23, &(0x7f0000fee000/0x2000)=nil, 0x5000) shmdt(r24) r25 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) shmat(r25, &(0x7f0000fee000/0x2000)=nil, 0x5000) r26 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) shmat(r26, &(0x7f0000fee000/0x2000)=nil, 0x5000) setsockopt$inet6_MCAST_MSFILTER(r14, 0x29, 0x30, &(0x7f0000002240)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=0x0, @ANYRES32=r1, @ANYRES32=0x0, @ANYPTR=&(0x7f0000002140)=ANY=[@ANYRES16=r15, @ANYRES16=r16, @ANYPTR=&(0x7f0000001f80)=ANY=[@ANYRES16, @ANYRESOCT=r18, @ANYBLOB="8a4e560b412ff88b85e6f6dcaaca281a3aaa5724caf46153641ef42ff44d4bf6413b5111101c7cba6653291da2a793c0b893365153ab9ce866a9862b01c8369845e75d5f3ea436e814f14223a19d1b17c3b51fda60b61cbd742447a1beb1d27a9aaf46a6dd3298849f1542ea74097ffc3062c66e956634c60284854c1043bcab301d7dcb1ffa8fb9c21e", @ANYPTR, @ANYRESOCT=0x0, @ANYRESDEC=r20, @ANYRES32=r22, @ANYBLOB="8efdcb8712f1c8cc0401dbc3ab537b76e8abd554fea7bbb10147dc65a81df604b3469a97c1f4234488fec24b7f612a6fa69b0088500bb10baf94706f8be85c8fc62ab677b1ba9efbc8daabd88d4d2a92fb6d33d595f1431592931d80fddacfaf626b759a0afa32ba809f1cc539f204619a9d02e9e38caa396d7272c918328181bd2e8adb99bb14d347ad2bb6b23744350492bd3b8e4ec4e402", @ANYRESOCT=r2], @ANYRESOCT=r1, @ANYBLOB="1c36cf69c8ff5fe85ea7c5a5f7a1c982af5382ed81c5627316b004d29bd5974b7778d2280a4344f3404c7e31c0373e6028d86743f0ee54997e3435589e8fea8891a09e5ac4bfcadb6d853b9637c2b1478e2a3f8f62f245", @ANYRES16, @ANYBLOB="f953b764f40915a88580568f9c087c3f73c2115ccf7d8b3e0b479f7f332cf6ac9409b443112cdf3dc3a3e4ec7ff22cc0315d7be32acf0c99f4b531e3d25c4121922969286c2004ef5caa68ba1042a98af768532b2213ad4b8e8c783313d87a788b9a9d3728636de4ddf977376208", @ANYRES32=0x0, @ANYRESHEX=r24], @ANYPTR64, @ANYRES64=r25, @ANYRES64=r26], 0x8) fcntl$setstatus(r2, 0x4, 0x80000000002c00) r27 = accept(r2, &(0x7f00000003c0)=@xdp, &(0x7f0000000440)=0x80) sendmsg$TIPC_NL_LINK_GET(r27, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x24088000}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0xf4, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_NET={0x30, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200004}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd60}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3ff}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_MEDIA={0x74, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ffffffd}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x48000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x546}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}]}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x80000}, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) recvmmsg(r1, &(0x7f0000000300), 0x400006e, 0x0, 0x0) r28 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/(\xe5j_ctrl\x06', 0x80401, 0x0) ioctl$VIDIOC_QUERYCTRL(r28, 0xc0445624, &(0x7f0000000a40)={0x1, 0x9, "d35064ba6a01026cb3b409a6a881e50a01567ca6296f5b6d1419cc29d29b7acb", 0x2, 0x9, 0x1, 0x7, 0x19}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r30 = dup(r29) ioctl$PERF_EVENT_IOC_ENABLE(r30, 0x8912, 0x400200) ioctl$UI_END_FF_UPLOAD(r30, 0x406855c9, &(0x7f0000000ac0)={0x2, 0xfffffff7, {0x54, 0x4, 0x3f, {0x2, 0x3f}, {0x4, 0x4a3b}, @ramp={0x5, 0x7fff, {0xfff, 0x1, 0xfc01, 0x9}}}, {0x28012e7c4d16219, 0x101, 0xfafd, {0x8000, 0x3f}, {0x6, 0x400}, @rumble={0x80, 0x800}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r32 = dup(r31) ioctl$PERF_EVENT_IOC_ENABLE(r32, 0x8912, 0x400200) r33 = accept4(r32, &(0x7f00000000c0)=@ipx, &(0x7f0000000140)=0x80, 0x80000) ioctl$IMGETVERSION(r33, 0x80044942, &(0x7f0000000180)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r35 = dup(r34) ioctl$PERF_EVENT_IOC_ENABLE(r35, 0x8912, 0x400200) sendto$ax25(r35, &(0x7f0000000b40)="3e1bb2937d72d4b15eb40203314af4c2ca3ffe904da4f472a3b38fcbcf761edff4c17398a56420ab8622c755c76f6609b0d8f4988ddd4df309f866c08915faf1aa6f9522cff4ed3fdc6aadfcecac1de1513f9b2b97ec1e8084b3bb9f0788fa", 0x5f, 0xa4e1d196d53e7e7d, &(0x7f0000000bc0)={{0x3, @bcast, 0x2}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000040)=0x100, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4000000000001b9, 0x0) 15:11:06 executing program 1: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) r3 = socket$inet(0x2, 0x3, 0x29) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000001440)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 145.375933] audit: type=1804 audit(1570461066.724:47): pid=7348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir684005504/syzkaller.GjcBj4/16/file0" dev="sda1" ino=16575 res=1 15:11:06 executing program 5: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000040)=0x2, 0x4) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:11:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x34b7c31a691c5d03}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x0) sysfs$3(0x3) r0 = openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000200)) syz_genetlink_get_family_id$SEG6(0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x6400, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000380), 0x4) ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f0000000680)=ANY=[@ANYBLOB]) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x101000, 0x0) accept4$inet6(r5, &(0x7f0000000180), &(0x7f0000000280)=0x1c, 0x800) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, &(0x7f00000000c0)={0x5, 0x0, 0xff, 0x605}) socketpair$unix(0x1, 0x3, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000600)={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @broadcast}, 0x8, {0x2, 0x0, @broadcast}, 'tunl0\x00'}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f00000001c0)=0x4) accept4(0xffffffffffffffff, &(0x7f0000000580)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x296, 0x0, 0x0, 0x0, 0x4ce]}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$KVM_HAS_DEVICE_ATTR(r8, 0x4018aee3, &(0x7f0000000500)={0x0, 0x80000000, 0x5, &(0x7f0000000400)=0xb1}) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 145.840759] protocol 88fb is buggy, dev hsr_slave_0 [ 145.846848] protocol 88fb is buggy, dev hsr_slave_1 [ 145.920647] protocol 88fb is buggy, dev hsr_slave_0 [ 145.925999] protocol 88fb is buggy, dev hsr_slave_1 15:11:07 executing program 5: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000040)=0x2, 0x4) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:11:07 executing program 4: fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(0xffffffffffffffff, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:11:07 executing program 0: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000040)=0x2, 0x4) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:11:07 executing program 3: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x801, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) r1 = open(&(0x7f0000000400)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x10081, 0x0) ioctl$TIOCLINUX2(r2, 0x541c, &(0x7f0000000140)={0x2, 0x7, 0x9, 0x0, 0x2, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x100}, 0x20048001) 15:11:07 executing program 1: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) r3 = socket$inet(0x2, 0x3, 0x29) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000001440)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:11:07 executing program 5: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000040)=0x2, 0x4) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:11:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'veth0_to_bond\x00', 0x1}, 0x18) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x49f) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r3, 0x0, r3) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x80000, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f00000002c0)) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0xba8e}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15:11:07 executing program 5: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000040)=0x2, 0x4) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r1, 0x0) 15:11:08 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup2(r2, r1) io_setup(0x4, &(0x7f0000000180)=0x0) io_submit(r4, 0x2, &(0x7f0000000240)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x4, r2, &(0x7f0000000080)="f8103bf64449d95bfaa3b94759c4a2748cd44655ffa3e02ef192faa781e45cf5abede3cebb3114c0027e1dbd109a573d93e917ea38f4971983b2f0c8c8", 0x3d, 0xffff000}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0x81, r3, &(0x7f0000000100)="9d24e15187c5094d70cc631a3d43d65f207ddcfe9ab14129bb226f1b2a55cbed302e90f5c4b07f0026cdb03df6825fb061665f8046d84b8f815f1cc302a4fe09558e45faa7e521bef2eefa823d74c9ab62e2cd0bceeadf70dbeebcb01f5599b0d03f4a07726c09f210187cdd3467d29701a2e6a8e7b7aef94c2d30a1038aa4cf41eed262e83b8b", 0x87, 0x3, 0x0, 0x7}]) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x80082, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r6) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x80) r8 = syz_open_dev$mouse(&(0x7f0000000480)='/dev/input/mouse#\x00', 0x2, 0x800) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vhost-net\x00', 0x2, 0x0) r10 = syz_open_dev$vcsn(&(0x7f0000001540)='/dev/vcs#\x00', 0x8000, 0x184000) r11 = perf_event_open(&(0x7f00000015c0)={0x3, 0x70, 0x8, 0x6, 0x4, 0x0, 0x0, 0x53e, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9cca, 0x7}, 0x2c259, 0xffffffffbf0e7b0f, 0x7, 0x7, 0x1, 0x7ff, 0x5}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r12 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001700)='/proc/self/net/pfkey\x00', 0x242500, 0x0) io_submit(r4, 0x5, &(0x7f0000001780)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0xe5, r5, &(0x7f0000000100)="9053e6a8d3b35bb22279340615a46bee1f292bb5940ae8ca1e0c561482a7ad183b2e6d4f619bc20e818119a4499a35bb56974d2bb06386313195b7c0555fb73dc3904ac9f8021b02c5049647f167ea461d2adaa7c7c492567b07d106f3deba6fc8b33b2018d677634602d8955e1ef75d8da7d2d6a03a2f0861b0d95419ffe4081ad4f5421c66633015e7e93abf6a08b69352bad779f53e03a4eed730a613a9a61625601ac22ac8c2d7de72fbc574dc25dc3d85266e197466c92a5218152277e4e651331a29ed487cc656acca4d2efe", 0xcf, 0x3, 0x0, 0x1}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x3ff, r6, &(0x7f0000000240)="0d839a58c0d67f92b8a91c97f9c10c10eeb433f62b14f4aba83280fb3d11d712cb06b643243bb7262469de58fae752a32c5ada5a017c261e81ca09090262d55ad7cd9d6685e25355a768e16f7f6431ca6d3c1c90b69f95866b3aa9676e8bb9a2824a56c9cd90c6f42e838cfceb1a4962dfa0b7dc9b19b5bf7a233a9fda32f672de64a970f9242c0619a74ee496a002956b22be4e6f2fd9910ee11e41cee5bb59b765c260ef89e6f778fc9c49b311911b9803f5acb7424cb0125bc673b3432a83d817a54df63cad56bd11f1ae4ab9cc60a26680ae62e3fe784f4fe3c70fd115", 0xdf, 0x6, 0x0, 0x1, r7}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x2, 0x7fff, 0xffffffffffffffff, &(0x7f00000003c0)="1c02f643137ba1d89163d494e722fa09b734c1989b527a38f3f55e991cb07a8dea271a15682af7c179625a898b6e75b1ec13ffe5f893524603e9a9842112190776eaef65ba34a88f4b4bac7d5c9f9200b1d3c370e92d3f24034b35e0a6f9cac0e2f2c1ce8cb3df2354a22df7277dd35ee00aea6ef0f018881b91e7e53bcf260ff71fb5d826c44144bf966dcb17d538a6e77485b0f7d1b20c84c8c3d73048268bc6ad021413429b1f2b82331235cc371e", 0xb0, 0xfff, 0x0, 0x1, r8}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x3, 0x0, r9, &(0x7f0000000540)="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", 0x1000, 0x101, 0x0, 0x1, r10}, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x3, r11, &(0x7f0000001640)="d1d50b6815e74c823746e283ff951fa0eb35358081c1f0facc8e813a01379bc1123058385c62b907e0dbefc2122b5bd56bbcd8261deb9c94cc51565caff068e7ffb1d638f32cdb87c25a139c38af8fcd548b0af279c1e6ad12033902af734e4f6a95df755f464e18b6519e036d4ac92da9caf3043ba3401704ae2b09f18ce97cc6f167fa190a44154ce29f17b1726da2e5af9495eeb1e1df80886525483ff25a22d4680221c4", 0xa6, 0x3, 0x0, 0x3, r12}]) r13 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) syz_emit_ethernet(0x56, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x6000000}, @local, [{[{0x9100, 0x1, 0x1, 0x1}], {0x8100, 0x3, 0x0, 0x3}}], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x18, 0x62, 0xffffffffffffffff, @remote={0xfe, 0x80, [0x29c, 0x58, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @local, {[], @icmpv6=@ndisc_na={0x88, 0x0, 0x0, 0x0, [], @local}}}}}}, 0x0) 15:11:08 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="1fcfa2724031651f81f77e847f0d3df0474deb1165402834174f52dee464d04271a1e690034a525d4d08c06ff25711c33116ffa5f24bf5470041aa470b26ee8ffae646d14b60957a151cdd893d6097107546c1d3a004d773d20f65b8e987b58ca4830a4865c95465c45f003e0e33f10d371fef97409decef082abb0bb61f61238d432c10943d61f34e6f4179ec7d1056a8f36cb3e0097fded45ab7eed6f956b8099cd34ee107c289b0576b2103dcac3558585b5f3252ee9ee44469da4c119feb4fd2918f45758ba66a4e1ff818167136f03e6fb9c21472c0870de4f6495f414b5ebe63f22cf4dad2da8e9bae8832175dec70ba8e", 0xf4}, {&(0x7f00000000c0)="ed66fc378176bd613e16899130fac1c6499b9e73949aab7141c213d1402841f2b99f1c017372e11ca2aa606a86a5bb5957517f397ea9a58d1197e50ea4779b22da065f5eb5fae70e3d17ffb0f4c83866dd55008604fd7534fe0e14fbaf452f22745c54a05691c389025e4c4213146efa8d514dd9fadc7021ab01637e6fce3c620c7536156444cf", 0x87}, {&(0x7f00000002c0)="0428cc81033a1d36c078fb146bc17b05614b69968f5d0bd8cc922f256b6c1fb937d8913aa59a0ebf9911708565df54561753f59f0a2c1fec437bf514230b401e9966d0269febec822928cce37b3ed7f24e753314cfba4a7e1276a522715f6ecc14de64d3c95e93ca0610844c75c0a5bdd6cacb3496da608a49b20aa70c9277289d77727f89dd16563631c0a8540d1b361c5d9472968769d4c1f61831a0da201eba19efc9dfe339a986f2815545a29f3730a699bd72523c9c8096562acd3c2fc58bdf719c", 0xc4}], 0x3}, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="020b000007000000000021003f54030200001a00000c2ad1c70389fbef5a0bc4d332899c934dd520175a3b8f8a86264fe600211000e0c99f"], 0x38}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x20, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') recvmmsg(r1, &(0x7f0000000140), 0x40000000000023d, 0x2000000022, &(0x7f00000001c0)={0x77359400}) readv(r0, &(0x7f00000000c0), 0x2d) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="15"], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f00000003c0)={0x0, 0x5}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000440)={r4, 0x6}, 0x8) 15:11:08 executing program 1: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = accept4$netrom(r1, &(0x7f0000000140)={{}, [@remote, @netrom, @remote, @null, @netrom, @netrom, @bcast, @default]}, &(0x7f00000001c0)=0x48, 0x80000) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000200)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_PRIMARY_RESELECT={0x8}]}}}]}, 0x3c}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r4, 0x0, r4) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000000)) r5 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r5, 0x41007701, &(0x7f0000000100)='/dev/null\x00') 15:11:08 executing program 0: r0 = socket$packet(0x11, 0x0, 0x300) socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(0xffffffffffffffff, 0x4040aea4, &(0x7f0000000480)={0xb63d, 0xffffffff, 0x0, 0x0, 0xfff}) creat(0x0, 0x1) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1d6) close(0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x200) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000340)={0xfffffffffffffffd}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x13) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000280)={0xeec7, 0x50565559, 0x0, @discrete={0x5af}}) unshare(0x100) syz_open_dev$sndpcmc(&(0x7f00000005c0)='/dev/snd/pcmC#D#c\x00', 0x8, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000640)='team\x00') socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockname$tipc(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$nbd(0xffffffffffffffff, 0x0, 0x0) 15:11:08 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000240)={0x7, 0x21, 0x2}, 0x7) recvmmsg(r1, &(0x7f0000006080), 0x337585c2d405c4d, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x78) fcntl$setstatus(r5, 0x4, 0x46000) io_setup(0x2344, &(0x7f0000000100)=0x0) io_submit(r6, 0x0, &(0x7f0000000540)) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440)='/shot\x00', 0x0, 0x0) read$FUSE(r7, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f00000000c0), 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000480)=ANY=[@ANYBLOB="010000003954d5fcd83a684dfbeccf8a753475e2c8dc246db596a2549cdf4c8b137c524dda6db33b1572ca2ef865e8a304e0874fd1e30423d0310d347dd2bb0663b025eb862b99ef057eb8b42333672925572b8a85f691addf3191fc03d60c353b", @ANYRES32=0x0], 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000000)={r10}, 0xc) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000380)={r10, @in6={{0xa, 0x4e22, 0x2, @ipv4={[], [], @local}, 0xffffffff}}}, 0x84) r11 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x2000, 0x10) setsockopt$inet_int(r11, 0x0, 0x0, &(0x7f0000000300)=0xcc, 0x4) socket(0x0, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="6a3a0966c27aa88ebaed0de321292f5e0a413132cebc8204a2ad85b989bdeab42c48de53dac7ff0e84ce78e325622591424a5713464d7b3ce7020240c544de8d3522cfc18e46", 0x46, 0x4004000, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) ioctl$KVM_DEASSIGN_PCI_DEVICE(r13, 0x4040ae72, &(0x7f0000000340)={0x4, 0x2, 0x3f, 0x4, 0x80000000}) 15:11:08 executing program 4: fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(0xffffffffffffffff, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) [ 147.154258] audit: type=1804 audit(1570461068.504:48): pid=7440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir819388383/syzkaller.Av5O75/17/bus" dev="sda1" ino=16595 res=1 15:11:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x10010000000035) r1 = getpgrp(r0) ptrace$getsig(0x4202, r1, 0x8, &(0x7f0000000000)) [ 147.230839] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31426 sclass=netlink_route_socket pig=7442 comm=syz-executor.2 15:11:08 executing program 5: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000040)=0x2, 0x4) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r1, 0x0) 15:11:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x10010000000035) r1 = getpgrp(r0) ptrace$getsig(0x4202, r1, 0x8, &(0x7f0000000000)) 15:11:08 executing program 0: perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) r1 = syz_open_dev$video(0x0, 0x3, 0x0) r2 = dup(r1) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f0000000080)={0x1}) ioctl$RTC_AIE_ON(r2, 0x7001) ioctl$TCSBRK(r2, 0x5409, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x348, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x216, 0x210007fd, &(0x7f0000000380)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendto$inet(r0, &(0x7f0000000540)="03268a927f1f6587b967480b41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfe6a, 0x2, 0x0, 0x204) shutdown(r0, 0x1) 15:11:08 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev={[], 0x1c}, 'bridge0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x7022, 0x0) 15:11:08 executing program 0: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000240)={0x1, 0xff}, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000300)='./file0\x00', 0x86842, 0x0) r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) write$9p(r2, &(0x7f0000000800)="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", 0x600) sendfile(r2, r3, 0x0, 0x10000) dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x20000, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x40, 0x9, 0x7, 0xb8, 0x0, 0x5, 0x40080, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x200}, 0x5c10, 0x100, 0x1, 0x8, 0x8001, 0x40, 0xd9}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r5 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/access\x00', 0x2, 0x0) splice(r5, &(0x7f0000000180), r1, &(0x7f00000001c0)=0x12, 0x80000001, 0x2) 15:11:08 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000340)='/dev/rtc\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x61883bea5100b932, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40040400) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000080)={{0x100000000, 0x0, 0x0, 0x0, 0x774}}) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x1, 0x8, 0xa5c, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x7, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x2, 0x4}, 0x0, 0x5e, 0xeb67, 0x0, 0x0, 0x5, 0x6}, 0x0, 0x9, r3, 0xc) syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0x0, 0x4200) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x200e80, 0x14) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r5 = fanotify_init(0x0, 0x0) fanotify_mark(r5, 0x0, 0x0, r4, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) write$P9_RREAD(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x153) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) close(0xffffffffffffffff) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) r6 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfffffffffffffe7c) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x50) syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x1, 0x1, {0x0, 0x0, 0x4, 0xb, 0x3, 0x401, 0x3}}) socket$inet_sctp(0x2, 0x5, 0x84) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) 15:11:08 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = creat(&(0x7f0000000580)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x98428d57a99b5f44) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r3 = socket(0x0, 0x400000400080803, 0x0) r4 = dup(r3) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000001700)=0xe8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r5}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000100)={{{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@empty}}, &(0x7f0000000000)=0xe8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x85e, 0x4e22, 0x4, 0xf76071848143519b, 0x1a0, 0x20, 0x4b, r5, r8}, {0x3, 0x7, 0x3f, 0x4, 0x20, 0x69c5, 0x1, 0x8}, {0x1f, 0x800, 0x81}, 0x4, 0x6e6bb1, 0x4, 0x1, 0x3, 0x2}, {{@in6=@rand_addr="da669bc512707ea93194c49a4c464623", 0x4d3, 0x6c}, 0xa, @in=@local, 0x3506, 0x2, 0x0, 0x20, 0x2, 0x7, 0x20}}, 0xe8) io_setup(0x4, &(0x7f00000004c0)=0x0) r10 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/checkreqprot\x00', 0x2, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r10, 0x114, 0x7, &(0x7f0000000740)={@vsock, {&(0x7f00000003c0)=""/169, 0xa9}, &(0x7f0000000480), 0x1}, 0xa0) io_submit(r9, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) fallocate(r0, 0x100000003, 0x804000, 0x28120001) [ 147.632787] audit: type=1800 audit(1570461068.974:49): pid=7471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=16532 res=0 [ 147.662809] audit: type=1804 audit(1570461069.014:50): pid=7477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir743184286/syzkaller.0oMX33/19/file0" dev="sda1" ino=16532 res=1 [ 147.676273] rtc_cmos 00:00: Alarms can be up to one day in the future [ 147.743687] IPVS: ftp: loaded support on port[0] = 21 15:11:09 executing program 4: fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(0xffffffffffffffff, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) [ 147.832411] audit: type=1804 audit(1570461069.184:51): pid=7437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir819388383/syzkaller.Av5O75/17/bus" dev="sda1" ino=16595 res=1 [ 147.878233] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31426 sclass=netlink_route_socket pig=7442 comm=syz-executor.2 15:11:09 executing program 2: getpeername$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x303}, "25cad2d9c7887200", "4b46becc9719ca3ebfd59f2490a2688a", "6d6fc0ec", "199d72551538871b"}, 0x28) sendto$inet6(r2, &(0x7f00000005c0), 0xffffffffffffff7f, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000280)="c0af37010ea296983eda7260aea3d257698ac0af66094d061cf617ed4240ae41c9d232fd54", 0x25, 0x4000000, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNGETFILTER(r3, 0x801054db, 0x0) listen(0xffffffffffffffff, 0x10001) 15:11:09 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = memfd_create(&(0x7f0000000100)=':\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x1, 0x12, r1, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x4000001}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) clone(0x8200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_tables_matches\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) pipe2(&(0x7f00000007c0)={0xffffffffffffffff}, 0x4000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f00000000c0), 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r11, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000117000/0x4000)=nil, 0x4000}, 0x2}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0], 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000000)={r12}, 0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r5, 0x84, 0x1c, &(0x7f0000000300), &(0x7f0000000340)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f00000004c0)=ANY=[@ANYRES32=r12, @ANYBLOB="5100000100000000b0718e64fb88862f990b3ad2461741a6393e403a579bb4efd3d2549951e97bb2a5c0ee92a44407d21d48da212082427ffd2332613f8e907edc3a8112b8095964383d4b314500281e04e930503b97a7c7d9882d756808ec98061cedb492bef53c554b025eb23d19e7ac1b5fe19ff1"], &(0x7f00000000c0)=0x59) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000003c0)={r13, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0xfffffffffffffffa, 0x1, 0xfff, 0x1ff, 0x4, 0x80, 0x2, 0x7ff, 0x1, 0x7fffffff, 0x0, 0x4, 0x0, 0x8, 0x2]}, &(0x7f00000002c0)=0x100) socketpair(0x2, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp6\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='7\v\x17\xad,\xf9\x00\xb8Q\xf5^t\xcf\xaf\x9dK5\ba\xef\xd1\x92\xec%\x83%\x97v\xbb9\x14\xef^\x83\xd3K\xa8\xb00ZB\xf3\xa8U\x14\b\x1c\x12\xe8\xf4D?\\)+\xafM\xa2\x88`%\x91\x7f!Zw\xa8\x1f\x14 !\x9e\xbet\xf4\xb2\xdc\x14\xba\xd5\x12\xf6\xd7\xfb\xd1\xf2g\\n\xb6}\xeeT\x85=\x18\xa1J\x01\xb7N\xdb\x0e\xff5q\x13\xb4^\x92\xe1\x00\x00\x00\x00\x00\x00\xb5\xbb:\xd2\xa4q\xc9\x11\\\xcf\xc87x\xd8*\xabs\xd7(\'\xa1\xef\xba\'\x97l\x10Lo\x12c:!\xb9`\x9bf$\xb3^?E\xc3/\xc3iN\xb3\xc5\x80\x01B\xde\rf\xaeW\v\xe7\xc79\xef\xb5\x99\xc1\xbfCQ\xebH\xe4>*\xe1\xbf\xac\x01\xbf\x01K\x1eO\x1cD\xc6\x06\xe8\x00\x00\x00\x00\x00\x00Tx9\xa7)\xb4\xed\xbda\x7f\xf9t\xf9\xd8\x8aG8M\xdc.\x00') sendmsg$tipc(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000540)="464d0426c7d7180b6c6f4d60c852b69b74b40b527541a6fb9ceb94285e987b6d6365c6bffff54ed981ccc75de8bd2a65711323130d1e21b4edd6aab8241feb9bc5a493b7871af093085a0b3029791308b67d51aea00dd9e6c7f6eef268089c469a3d81e9eea25b8f13ac1acca70fc3", 0x6f}, {&(0x7f00000005c0)="b9a713f85914bdd469ab969506f8b864077d86425a4fb5c5c7f3a9e51124ae8e446a705714dfa6c3e7a236d75cff4035b2b99935e8f8dc8baa8b2c7e6d5da5c3ce30c90c6b509d33a429387401bb9c983ff1dbed52d9b4ae36ff63b25c6249e5eb74fa9e18c237", 0x67}, {&(0x7f0000000280)="36a1ca056c91575bee6c9af4f92dc144c1e0dba7021a9e9a463edf8809edb1938162ecb4927500796574ecf95b85d193700f2a7b92c34ac6c91a", 0x3a}], 0x3, &(0x7f0000000680)="2b2fff18882f6d3325ef6b00923e9f2b991bc4e6b032dc643b76419cab3f7f8d1b3fc3626d14f1230d5c4f53291171", 0x2f, 0x20000004}, 0x80) 15:11:09 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = memfd_create(&(0x7f0000000100)=':\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x1, 0x12, r1, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x4000001}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) clone(0x8200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_tables_matches\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) pipe2(&(0x7f00000007c0)={0xffffffffffffffff}, 0x4000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f00000000c0), 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r11, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000117000/0x4000)=nil, 0x4000}, 0x2}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0], 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000000)={r12}, 0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r5, 0x84, 0x1c, &(0x7f0000000300), &(0x7f0000000340)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f00000004c0)=ANY=[@ANYRES32=r12, @ANYBLOB="5100000100000000b0718e64fb88862f990b3ad2461741a6393e403a579bb4efd3d2549951e97bb2a5c0ee92a44407d21d48da212082427ffd2332613f8e907edc3a8112b8095964383d4b314500281e04e930503b97a7c7d9882d756808ec98061cedb492bef53c554b025eb23d19e7ac1b5fe19ff1"], &(0x7f00000000c0)=0x59) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000003c0)={r13, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0xfffffffffffffffa, 0x1, 0xfff, 0x1ff, 0x4, 0x80, 0x2, 0x7ff, 0x1, 0x7fffffff, 0x0, 0x4, 0x0, 0x8, 0x2]}, &(0x7f00000002c0)=0x100) socketpair(0x2, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp6\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='7\v\x17\xad,\xf9\x00\xb8Q\xf5^t\xcf\xaf\x9dK5\ba\xef\xd1\x92\xec%\x83%\x97v\xbb9\x14\xef^\x83\xd3K\xa8\xb00ZB\xf3\xa8U\x14\b\x1c\x12\xe8\xf4D?\\)+\xafM\xa2\x88`%\x91\x7f!Zw\xa8\x1f\x14 !\x9e\xbet\xf4\xb2\xdc\x14\xba\xd5\x12\xf6\xd7\xfb\xd1\xf2g\\n\xb6}\xeeT\x85=\x18\xa1J\x01\xb7N\xdb\x0e\xff5q\x13\xb4^\x92\xe1\x00\x00\x00\x00\x00\x00\xb5\xbb:\xd2\xa4q\xc9\x11\\\xcf\xc87x\xd8*\xabs\xd7(\'\xa1\xef\xba\'\x97l\x10Lo\x12c:!\xb9`\x9bf$\xb3^?E\xc3/\xc3iN\xb3\xc5\x80\x01B\xde\rf\xaeW\v\xe7\xc79\xef\xb5\x99\xc1\xbfCQ\xebH\xe4>*\xe1\xbf\xac\x01\xbf\x01K\x1eO\x1cD\xc6\x06\xe8\x00\x00\x00\x00\x00\x00Tx9\xa7)\xb4\xed\xbda\x7f\xf9t\xf9\xd8\x8aG8M\xdc.\x00') sendmsg$tipc(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000540)="464d0426c7d7180b6c6f4d60c852b69b74b40b527541a6fb9ceb94285e987b6d6365c6bffff54ed981ccc75de8bd2a65711323130d1e21b4edd6aab8241feb9bc5a493b7871af093085a0b3029791308b67d51aea00dd9e6c7f6eef268089c469a3d81e9eea25b8f13ac1acca70fc3", 0x6f}, {&(0x7f00000005c0)="b9a713f85914bdd469ab969506f8b864077d86425a4fb5c5c7f3a9e51124ae8e446a705714dfa6c3e7a236d75cff4035b2b99935e8f8dc8baa8b2c7e6d5da5c3ce30c90c6b509d33a429387401bb9c983ff1dbed52d9b4ae36ff63b25c6249e5eb74fa9e18c237", 0x67}, {&(0x7f0000000280)="36a1ca056c91575bee6c9af4f92dc144c1e0dba7021a9e9a463edf8809edb1938162ecb4927500796574ecf95b85d193700f2a7b92c34ac6c91a", 0x3a}], 0x3, &(0x7f0000000680)="2b2fff18882f6d3325ef6b00923e9f2b991bc4e6b032dc643b76419cab3f7f8d1b3fc3626d14f1230d5c4f53291171", 0x2f, 0x20000004}, 0x80) 15:11:09 executing program 5: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000040)=0x2, 0x4) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r1, 0x0) 15:11:09 executing program 2: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000040)=0x2, 0x4) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r1, 0x0) 15:11:09 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = memfd_create(&(0x7f0000000100)=':\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x1, 0x12, r1, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x4000001}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) clone(0x8200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_tables_matches\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) pipe2(&(0x7f00000007c0)={0xffffffffffffffff}, 0x4000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f00000000c0), 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r11, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000117000/0x4000)=nil, 0x4000}, 0x2}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0], 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000000)={r12}, 0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r5, 0x84, 0x1c, &(0x7f0000000300), &(0x7f0000000340)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f00000004c0)=ANY=[@ANYRES32=r12, @ANYBLOB="5100000100000000b0718e64fb88862f990b3ad2461741a6393e403a579bb4efd3d2549951e97bb2a5c0ee92a44407d21d48da212082427ffd2332613f8e907edc3a8112b8095964383d4b314500281e04e930503b97a7c7d9882d756808ec98061cedb492bef53c554b025eb23d19e7ac1b5fe19ff1"], &(0x7f00000000c0)=0x59) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000003c0)={r13, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0xfffffffffffffffa, 0x1, 0xfff, 0x1ff, 0x4, 0x80, 0x2, 0x7ff, 0x1, 0x7fffffff, 0x0, 0x4, 0x0, 0x8, 0x2]}, &(0x7f00000002c0)=0x100) socketpair(0x2, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp6\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='7\v\x17\xad,\xf9\x00\xb8Q\xf5^t\xcf\xaf\x9dK5\ba\xef\xd1\x92\xec%\x83%\x97v\xbb9\x14\xef^\x83\xd3K\xa8\xb00ZB\xf3\xa8U\x14\b\x1c\x12\xe8\xf4D?\\)+\xafM\xa2\x88`%\x91\x7f!Zw\xa8\x1f\x14 !\x9e\xbet\xf4\xb2\xdc\x14\xba\xd5\x12\xf6\xd7\xfb\xd1\xf2g\\n\xb6}\xeeT\x85=\x18\xa1J\x01\xb7N\xdb\x0e\xff5q\x13\xb4^\x92\xe1\x00\x00\x00\x00\x00\x00\xb5\xbb:\xd2\xa4q\xc9\x11\\\xcf\xc87x\xd8*\xabs\xd7(\'\xa1\xef\xba\'\x97l\x10Lo\x12c:!\xb9`\x9bf$\xb3^?E\xc3/\xc3iN\xb3\xc5\x80\x01B\xde\rf\xaeW\v\xe7\xc79\xef\xb5\x99\xc1\xbfCQ\xebH\xe4>*\xe1\xbf\xac\x01\xbf\x01K\x1eO\x1cD\xc6\x06\xe8\x00\x00\x00\x00\x00\x00Tx9\xa7)\xb4\xed\xbda\x7f\xf9t\xf9\xd8\x8aG8M\xdc.\x00') sendmsg$tipc(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000540)="464d0426c7d7180b6c6f4d60c852b69b74b40b527541a6fb9ceb94285e987b6d6365c6bffff54ed981ccc75de8bd2a65711323130d1e21b4edd6aab8241feb9bc5a493b7871af093085a0b3029791308b67d51aea00dd9e6c7f6eef268089c469a3d81e9eea25b8f13ac1acca70fc3", 0x6f}, {&(0x7f00000005c0)="b9a713f85914bdd469ab969506f8b864077d86425a4fb5c5c7f3a9e51124ae8e446a705714dfa6c3e7a236d75cff4035b2b99935e8f8dc8baa8b2c7e6d5da5c3ce30c90c6b509d33a429387401bb9c983ff1dbed52d9b4ae36ff63b25c6249e5eb74fa9e18c237", 0x67}, {&(0x7f0000000280)="36a1ca056c91575bee6c9af4f92dc144c1e0dba7021a9e9a463edf8809edb1938162ecb4927500796574ecf95b85d193700f2a7b92c34ac6c91a", 0x3a}], 0x3, &(0x7f0000000680)="2b2fff18882f6d3325ef6b00923e9f2b991bc4e6b032dc643b76419cab3f7f8d1b3fc3626d14f1230d5c4f53291171", 0x2f, 0x20000004}, 0x80) [ 148.397913] audit: type=1804 audit(1570461069.744:52): pid=7477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir743184286/syzkaller.0oMX33/19/file0" dev="sda1" ino=16532 res=1 15:11:09 executing program 0: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000240)={0x1, 0xff}, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000300)='./file0\x00', 0x86842, 0x0) r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) write$9p(r2, &(0x7f0000000800)="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", 0x600) sendfile(r2, r3, 0x0, 0x10000) dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x20000, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x40, 0x9, 0x7, 0xb8, 0x0, 0x5, 0x40080, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x200}, 0x5c10, 0x100, 0x1, 0x8, 0x8001, 0x40, 0xd9}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r5 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/access\x00', 0x2, 0x0) splice(r5, &(0x7f0000000180), r1, &(0x7f00000001c0)=0x12, 0x80000001, 0x2) [ 148.544611] audit: type=1804 audit(1570461069.744:53): pid=7477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir743184286/syzkaller.0oMX33/19/file0" dev="sda1" ino=16532 res=1 15:11:09 executing program 1: syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xaf, 0xa00002) openat$hwrng(0xffffffffffffff9c, 0x0, 0x40000, 0x0) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0xfffffffffffffed4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x565, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = dup(0xffffffffffffffff) write$RDMA_USER_CM_CMD_BIND(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x4da, 0x8000) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{0x0}], 0x1, 0x0) sendfile(r1, r3, 0x0, 0x102000002) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 148.585442] audit: type=1800 audit(1570461069.884:54): pid=7529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=16575 res=0 [ 148.664800] audit: type=1804 audit(1570461069.934:55): pid=7533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir743184286/syzkaller.0oMX33/20/file0" dev="sda1" ino=16575 res=1 15:11:10 executing program 4: r0 = open(0x0, 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:11:10 executing program 1: syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xaf, 0xa00002) openat$hwrng(0xffffffffffffff9c, 0x0, 0x40000, 0x0) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0xfffffffffffffed4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x565, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = dup(0xffffffffffffffff) write$RDMA_USER_CM_CMD_BIND(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x4da, 0x8000) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{0x0}], 0x1, 0x0) sendfile(r1, r3, 0x0, 0x102000002) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 15:11:10 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000340)='/dev/rtc\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x61883bea5100b932, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40040400) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000080)={{0x100000000, 0x0, 0x0, 0x0, 0x774}}) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x1, 0x8, 0xa5c, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x7, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x2, 0x4}, 0x0, 0x5e, 0xeb67, 0x0, 0x0, 0x5, 0x6}, 0x0, 0x9, r3, 0xc) syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0x0, 0x4200) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x200e80, 0x14) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r5 = fanotify_init(0x0, 0x0) fanotify_mark(r5, 0x0, 0x0, r4, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) write$P9_RREAD(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x153) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) close(0xffffffffffffffff) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) r6 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfffffffffffffe7c) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x50) syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x1, 0x1, {0x0, 0x0, 0x4, 0xb, 0x3, 0x401, 0x3}}) socket$inet_sctp(0x2, 0x5, 0x84) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) 15:11:10 executing program 5: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000040)=0x2, 0x4) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) tkill(r1, 0x1002000000016) 15:11:10 executing program 2: r0 = socket$inet(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fsync(r4) sendmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000880)="24000000520007041dfffd946fa283000a200a0009000300001d85680c1ba3a20400ff7e280000001100ffffa116a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x282000) 15:11:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c01000010000507000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="0000000000000000690012000c000100697036746e6c00003c010200080005000000000008001200000000000800070000000000080008000000000008001200000000000800110000000000080004000000000008000200", @ANYRES32=0x0, @ANYBLOB="0800070000000000140002000000000000000000000000000000000108000200", @ANYRES32=0x0, @ANYBLOB="0400130014000200fe880000000000000000000000000001080007000000000014000300fe8000000000000000000000000000aa08000900290000000800090029000000080006000000000008000700000000000800080000000000080007000000000008000700000000001400030000000000000000000000000000000001080008000000000008000600000000000800060000000000daff03004a5b86f0de488a9c8d0e448b8394edb00800080000000000080008000000000008000800000000000800080000000000"], 0x16c}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000240)={{0x89, @local, 0x4e20, 0x0, 'none\x00', 0x4, 0xffff, 0x31}, {@remote, 0x4e23, 0xa000, 0x7, 0x2, 0x63}}, 0x44) [ 149.219653] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 149.236739] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.1'. [ 149.259192] netlink: 89 bytes leftover after parsing attributes in process `syz-executor.1'. 15:11:10 executing program 2: sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)={0x1f}, 0x1c}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x100000001, 0x2}, &(0x7f0000000140)=0x18) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000001c0)=@assoc_id=r3, 0x4) r4 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$bfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0xb62, &(0x7f0000000040)=[{&(0x7f0000000180)="cefaad1bb83c000000dc", 0xa}], 0x8840, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) read(r6, &(0x7f0000000240)=""/167, 0xa7) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000200)=[@window={0x3, 0x7, 0xff}, @mss={0x2, 0x5ed3}, @window={0x3, 0x6, 0x7}], 0x3) [ 149.281343] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:20000 [ 149.318062] rtc_cmos 00:00: Alarms can be up to one day in the future 15:11:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x6300, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000000c0), 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) r6 = syz_open_dev$dmmidi(&(0x7f0000000240)='/dev/dmmidi#\x00', 0x3, 0x20040) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r7, 0x76f32d23a3f5d38f, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x3}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8000) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000000)={r5}, 0xc) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)={r5, 0x80, 0x6, [0x8001, 0x0, 0x2, 0x9, 0x401, 0x7]}, &(0x7f0000000180)=0x14) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000001c0)={r8, 0x200, 0x0, 0x2, 0x8, 0x1}, &(0x7f0000000200)=0x14) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) 15:11:10 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000480)='devpts\x00W\xf0W5\x80~.\xa4\xb5\x9cNjm\xd1\xc8\x10\x04T4qv\x99\x02\xa93\xea\x92\xc0\xa2)!\xc8\xa5\f\xa2\x87\xb9k\xbdh\xb7\\\x8d\xca\xf7KJ\x94\x16\x82\xde0\x03\xc01\xdc\xdaG\x8a?\xbe=\xccj\xdfc\xab\x9c\x8cb\xd4\xe5\xa3G\xcf\x02\xda\x10hw\xb6\xeb\x94\xf8\xcea\x12EfV\xa9\xd8\x1e', 0x1, &(0x7f00000001c0)='/dev/ashmem\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x11f8889fb96a1989, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)={&(0x7f00000002c0)='./file1\x00', 0x0, 0x10}, 0x10) fcntl$setpipe(r5, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r7, 0x40087703, 0x6) ioctl$ASHMEM_SET_NAME(r7, 0x41007701, &(0x7f0000000000)=':%\xb8#eth1\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r7, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000240)={0x0, 0x0, 0x6a2f}) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1, 0x6) r8 = shmget$private(0x0, 0x3000, 0x200, &(0x7f0000701000/0x3000)=nil) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) shmctl$IPC_SET(r8, 0x1, &(0x7f00000005c0)={{0x0, r10, 0x0, 0x0, r11, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(r6, r6, 0x0, 0x2008000fffffffe) [ 149.326387] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.1'. [ 149.349480] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 149.354238] netlink: 89 bytes leftover after parsing attributes in process `syz-executor.1'. 15:11:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x6300, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000000c0), 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) r6 = syz_open_dev$dmmidi(&(0x7f0000000240)='/dev/dmmidi#\x00', 0x3, 0x20040) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r7, 0x76f32d23a3f5d38f, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x3}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8000) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000000)={r5}, 0xc) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)={r5, 0x80, 0x6, [0x8001, 0x0, 0x2, 0x9, 0x401, 0x7]}, &(0x7f0000000180)=0x14) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000001c0)={r8, 0x200, 0x0, 0x2, 0x8, 0x1}, &(0x7f0000000200)=0x14) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) [ 149.439540] devpts: called with bogus options [ 149.450055] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 15:11:10 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x142}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0xffffffffffffff2f) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x90) fcntl$setstatus(r3, 0x4, 0x80000000002c00) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x90) fcntl$setstatus(r6, 0x4, 0x80000000002c00) setsockopt$inet6_tcp_int(r6, 0x6, 0x200000000000013, &(0x7f0000000000)=0x80000000, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x90) fcntl$setstatus(r5, 0x4, 0x80000000002c00) getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xf3) r7 = socket(0x0, 0x80000, 0x0) r8 = dup(r7) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000001700)=0xe8) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r9}) r10 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x2, 0x40000) ioctl$SG_EMULATED_HOST(r10, 0x2203, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@loopback, 0x17, r9}) r11 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x10000, 0x0) ioctl$VIDIOC_G_PRIORITY(r11, 0x80045643, 0x3) process_vm_writev(r1, &(0x7f0000000a00)=[{&(0x7f0000000140)=""/134, 0x86}, {&(0x7f0000000740)=""/162, 0xa2}, {&(0x7f0000000200)=""/100, 0xfffffffffffffe65}, {&(0x7f0000000800)=""/192, 0xc0}, {&(0x7f00000002c0)=""/98, 0x62}, {&(0x7f00000008c0)=""/69, 0x45}, {&(0x7f0000000940)=""/159, 0x9f}], 0x7, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x10000002, 0x0) close(r0) 15:11:10 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="6e6f6465636f6d706f73652c6e6f6465636f6d706f73652c747970653d5cde72db2c6e6f626172726965722c7569643d", @ANYRESHEX]) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x501000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0xffffffffffffffff, 0x0, 0x87, 0x2, 0x7f}, 0x69f, 0x0, 0x8}) 15:11:10 executing program 4: r0 = open(0x0, 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) [ 149.555000] audit: type=1800 audit(1570461070.904:56): pid=7590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=16575 res=0 [ 149.590672] hfsplus: invalid uid specified [ 149.596743] hfsplus: unable to parse mount options [ 149.629097] audit: type=1400 audit(1570461070.934:57): avc: denied { map } for pid=7572 comm="syz-executor.1" path="/dev/ashmem" dev="devtmpfs" ino=906 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 15:11:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x7f, 0x40050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x408}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) sysinfo(&(0x7f0000000000)=""/22) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f0000000140)={0x4, &(0x7f0000000040)=""/125, &(0x7f0000000380)=[{0x5, 0x7f, 0x7f, &(0x7f00000000c0)=""/127}, {0x10000, 0x73, 0x3, &(0x7f00000001c0)=""/115}, {0x8502, 0x96, 0xffffffff, &(0x7f0000000240)=""/150}, {0xffff, 0x5b, 0x6, &(0x7f0000000300)=""/91}]}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000400)={{}, 0x2}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x03\x00', @ifru_flags}) [ 149.677033] hfsplus: invalid uid specified [ 149.681915] hfsplus: unable to parse mount options [ 149.765658] devpts: called with bogus options 15:11:11 executing program 3: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) clone(0x800007fd, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffe, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvfrom$ax25(r1, &(0x7f0000000040)=""/166, 0xa6, 0x40010000, &(0x7f0000000200)={{0x3, @null, 0x8}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) mount(&(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='gfs2meta\x00', 0x0, 0x0) 15:11:11 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$TIPC_NODE_RECVQ_DEPTH(r2, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x14, 0x2000) ioctl$ASHMEM_SET_NAME(r0, 0x7709, &(0x7f0000000440)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00'/209) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x1, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x17, &(0x7f0000000140), &(0x7f0000000180)=0x4) 15:11:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r2 = socket(0x0, 0x400000400080803, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x440, 0x0) r3 = dup(r2) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000001700)=0xffffffffffffff81) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r4}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8880000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@gettfilter={0x2c, 0x2e, 0xd82, 0x70bd2d, 0x25dfdbfb, {0x0, r4, {0xfff1, 0xc}, {0x0, 0xffe1}, {0xffe2, 0x5}}, [{0x8, 0xb, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) splice(r5, &(0x7f00000000c0), r3, &(0x7f0000000180), 0xe715, 0x4) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[@ANYBLOB='{'], 0x1) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) 15:11:11 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='\x00d\x00\a\x00\x83E') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9, 0x158153, r1, 0x0) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB='h\x00\x00H', @ANYRES16=r5, @ANYBLOB="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"], 0x68}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400201) getdents64(r4, &(0x7f00000007c0)=""/528, 0xfffffffffffffdca) 15:11:11 executing program 5: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000040)=0x2, 0x4) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) tkill(r1, 0x1002000000016) 15:11:11 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0x0) close(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000000)={0x1, 0x54, "af51ad83dfa5a88908f2c48d62a3d83c55b5fae40facc7577a4e3eae61b421246b428851457867207c7fce1691f6467d76ea7efb34abfebdcfb47608b131fb807dcbfa1d3bfb28d414c7179a3f980059cdf7d055"}) sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492805, 0x0) 15:11:11 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0xf4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x90) fcntl$setstatus(r4, 0x4, 0x80000000002c00) sendmmsg(r2, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="e959590f3772f448ca48a216b090286cebdaa480256723157892c8eaf5c03aa487c32b3b6052df737830c157996e537e1c4a9cdca20d2870bb9b765d1935dba6741922b1d7007d3930d9c78051d204714f22e1fd8cb0233cf9c862c55b36d9bd6c9d6be3e8054e1ef3dcacb2c9bb5829a2ab52d32d49195c1109b3a4fc942860ae1fb3e7c15d54da642bb0b7a1aef77e542fc17588bf236aba89c374a4c43b82", 0xfffffffffffffd3e}, {&(0x7f0000000180)="b168c13af4a2b87ed90b4240995c305547dc", 0x12}, {&(0x7f00000001c0)="dd19b8795f606b5ac344cd91c346735d9d358878959aadc18bb9ebb006386424f43868f9feb7b7fdd3b73c91c682f63c0fc23cbd8de979275e4abd09c5046950eacf1cdee8833d08926193418cbebf5b9746f3bfbdf261648ae9a8fd956e47b6a19d900376eb27165d4c8718d397ad8a9efcce3dce03", 0x76}, {&(0x7f0000000240)="b8740682da719117242159dc9a3b100e0f8ce3f93ce6870b7b55b1427136896690640c8db67b89260cd363a3a62a20da4b3fae7d2b97fb87589f86b2e00121d921a1ec76dd04cb1233982f90a2c35badc353dabc51ed4cb7ae16baea6b47fa6f63c917c0be33491880b4a13db12d1744152ddea0e89d888a", 0x78}, {&(0x7f00000002c0)="cf5674a5e0c54febb3786cfe2e9c74ec4607b1d4a16c201eb607c49fb742746bba0b16825a3bec0ce61e7ee229a4936cdcfc1d94cf5168bec473109501a0698aa02b3350d6ab6436c572abc15905bed643120fc2f987e818674a20be00068296b1417255529046456ce76bc77b6e8e72a17478c80a827b301f5a2b8f9565bd151300454201c9e75089930a1d75fefaab3c0322d61a7b1cd53fe0ab6d4c05458b3beb6e94daff9bab5138f1b27f58d7bddc461220e3bf9f9b7f81ff46d2c92384f3cc1315fa7fcb6416a041108d4f429447ec8588e4055c013e55517cfbd38a319ee320e0a6499ff5e7e4c2a8", 0xec}, {&(0x7f00000003c0)="2ff0c512bc149215a0183ef8", 0xc}], 0x6}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000480)="227c3a2512ba8fc4259650ed633c22a914e0434ca937f1019660dada4e3da89e315480f33f4e68d063d6a86ae670ffe36bc4a20d23ae6a3af9e20ed95b351ad37b71", 0x42}, {&(0x7f0000000500)="f07de8deca1fc4140d4fdbae0234e85cccf7ff674e79d8dfc91984ac6cf34ecec52e40c1fdd8b97fe1f61d9b35992022098ce04509fd03e6230c4e350481f6328268837f1fc8fe5ebbcccbfe18fa3e5aadd27fcf19dfb2bc8894b62b8120d785e1d9a931953c69e32d0f78f300f56d40286a119388f9721794b03daa9c098bbd3409c638a0e462cc996f1be2716282989ffbc32adf0d5c8c1197c9ecfe41590bdfdbb0e769a11c2c67ccdaf42fef322d9931cd6cce243ddf4fa0264f784d789ea25794c81f71f6", 0xc7}, {&(0x7f0000000600)="9e62fdc879d490e627bfaceff073151d24cbed02e4382015f5cca894720adfdf6bfade18d3cdfca0561c1b85be24d1dc46dedb276b25e36c9e841163c27a99e647eac086f16e67d91a706867ffb1e364c3818ec883d3104564fe95eaeec425d1ca584dd8136d85ccf3df783f4c243aed0da0f671862c08280ac36ead9170c2202ae30456eab4f7f6781980bf3189ffe7ff1cd5c35f7420207d40281f9d88ff9aa478240808f0ec2cfa68329c", 0xac}], 0x3, &(0x7f0000000700)=[{0x1010, 0x10e, 0xe9b4, "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"}, {0x98, 0x1, 0x1420, "d026f92f69b5006f1bccf301d00b41f00533e93e910e5dd3236e1270cac1ab2ec2bfb5a864da33efd0b5d17fcd4c286ce778629a1e99873e1278e17887c29cf195b70dfc1b1d02103fb7304bf8897bb77da3fcf507417527224588e99ec7d04420042391ed87553aa65953db52a6be19949df208dab266e23643b53820b0eabc44c93ff61fe7"}, {0xe0, 0x308, 0x200, "bca8798999fa68cb54502e2d6663c38b191926fcae78b6afc09195e3fe74bce67abf7b4ff9e7cee5228e9913d2e9ebaa76186d3ab2825ab97bdf499da5769116933567a17903457625903524c7035d80e8757821dcebb735a423564e53c3bd744c83fbe86fa0bcbcc00b12c6ec8765e4f9628d2e18305424f746abcaf2eb0d180bdf54e226d8b2ad652f02d75b4f747c75166dbb43cea8e8e53da776431867eaaf0bdc1503627b14e96ec666ec9183d99023dee23585ee06097329239de9afd830cd2d10ad40a4d87a667aa3"}, {0xb0, 0x10b, 0xfffffe01, "48251e6a1097ae00732e3d7b3013d92ad9762c7463e92deb36cc6e08a307953f0a1b44002af1e8520c893c0d214b84d21f3b8f18f51167366f8c534fd8d47569354118916188e60a2477fe202bd863d307773ee19b15db57a55e52f6f90bf6f1544d2a11ae421138881f28f8fbc18de68f61fae2074c6273dff1cda657d7b5a2a2c1a960492253dd24cd630d8a4c69f3af36ab91e8a78e244c"}, {0x40, 0x115, 0x63, "4f7404e2537688e893010cfd028885f37eaeb382fce0df1476bcc3a80e41e8532d2ea2fe8e9495d4e4b02e4d1c2fd4e3"}], 0x1278}}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001980)="1e7888091d5903c79e06ee662817f305dc64efa407798ef6169ebaba1921d361faebd2b3364d8ae8b57b16c2b0f0d281ac87365bc58818dbefeadde3d66d5aa6a0154fac6169ebee0eeceaabcadccc837b05be25975049d3754c227b630a892c3903288dfaf94181170294d9387b8f9076e0c55ccba3dc9b6b6db42ea423b815f128058acab63dbaf319bcc5c614ea2792ed19f26ac8336bb0", 0x99}], 0x1, &(0x7f0000001a80)=[{0xa8, 0x102, 0x6, "8c6ef9dad3090aec688ac80e232b06d1cf270d23d43c6d04207cdbc33a0dfa899235204ece214ea09b03615b5d98627f8c9af646dac68c721d05f9e3a20fe1569aa7fe160912e31b2475e3248b9b4cf8ccd54546d416a41a206b7f4c0a88d4849c6ff29258a6d4f1618339db3549152f1fef4f03eae8c9b6460c353188e6eab24480e124b7c59a6e03fa39ac9837e23925e5"}, {0xa8, 0x111, 0xac9, "6dff5cf457d58deeb3825e091b2a391a27cfd88091c67bcfa9bf0109690bc898c174e7bd24255348911a366ddddba2f3749c4dcd180756e9f9716e63f8725fa5f0c147ab021bb4a1d36134450402306440e3b11edc47a7fc9283f3ca9a8259fd860c3495a2dcf2c716bd972db3147f098b21a5640b420a789740b7639d848c6147e96189950ade60e40241a8b3270d1471c773d0362926c7"}, {0x68, 0x10a, 0x86fd, "134eac9b1600bb70889e42507daf4b797cf2d5e8cbcdbada2e3e0da12d1e6899b13b727e2df6ccb5fd370a2f2d5799217df3de6bedfcb0af1bc2dc3c7a209e77efca1c2ccef5c93295e4ec3bc97460d26b47964fe30faf69"}, {0xc8, 0x105, 0x100, "41eb33059e69b59dd4404ea8cb05024ca1d6922547921def6dde6ef7ef92c2ae9c66f90d124126b78b8678df3f741cf215223f9112f07e5d51c9e3dbb846bc7a1df6995338e7beccb13289e6f222fc7a014994b1639a502ff19d08881284c815fff889bf1aaa475a8180b81d40fc5143f69a56400e794b0d39a8f8e47b850828b79829f94f2f3de355ce3dc4ae0219f9f46aae3df1c4522cbb8d8cfbef3bb2d3867f165fbc17201b5a92e8f4e693d8b902a5"}, {0x68, 0x10c, 0x0, "83695a60b0daf1e6e0ff0e35af51f3a406b55cee59f130dab087ca40507c25bb6f1d8fe1cc495a48119b4e7733c1fb640461e72226b197d813eb7e9439e07e73b6866c0c32089a4bb554acc7c0540d7cfcb5aad3"}, {0x78, 0x109, 0x6, "98f57dbd6786857c0bdb3a76b10d3e71c956c1a5d8cfe4cdeee0f8c585a798af3d3d79ae78162bc2bb77734b1664957bc16eb4d5f1d3ca7165b5eca5e71ac0080716d4a5a45a841d74cdcc8b6928af83648458bc44c91f68045157db1e2e18a6a60b66d21787b1"}, {0x108, 0x112, 0x3a0d81cd, "768baf0a889f40f1848f57eaf26682644d3ff96ddfa232a7034a98d534f781bea59e2002705d422454b0fd6fdabbfd516fe7b5ba2daf4c3cd116559a8dcc1baa11c44d5e7d4728e96fbf455bd205ebb89d970c183eee214f3e1086a54b831b1122df399aa936c145edc06d1a0eb3b1fcfd23e1211f77563bfb438459fb658c6e37daede2c989c3f6dae629eebfb76e33d8c9fe44f3f4e451337c2a8815e95b295583352b279d17b32c2edce9b820ddd2a7c4ae0084c4e5014e1bf982a88510fd5b25db2b175765c6249dfbd45bf91c8732bffd76031fa243bb5a0eb1d31cd7f145311642bc60e97ad7071d7b53171a6be03019761792"}], 0x468}}, {{&(0x7f0000001f00)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2, 0x4, 0x1, 0x2}}, 0x80, &(0x7f0000002400)=[{&(0x7f0000001f80)="19dd391e1575f91d255bb7d154c1b3858eac39940ff1c5e7699a971803b1e768767906af004a3daa669335d1a860f4c6dfd6cd93d712cfcf35e3f371595253e00e46e436b57f7eea6ef6836fb73e3b8d32950e6747d49f4cab51e704548a05cd71304a6620d2727671c4476565e44883ea8f19857468148faedfcf9eaafe1c778072b2beb555cd74643f965c6019ed59dc7793f04b47a44f63a20ff9e45238f9bdfdee17dd24e3e44f507799420bdae65dd36970a0a467af809a9d78379125a49414afb92164209aca03cc3694ca09", 0xcf}, {&(0x7f0000002080)="0ffc6af1d0183d9d5f6b9307bc3db3fa2f5bf4f195cca84de7278fb1944e519eb062f71e51af14621e87f9a3ea", 0x2d}, {&(0x7f00000020c0)="79cea2641ddcb8b1222f58e938c6ae48c0791e9fc27246d61a4e146a9503fdafb344fbcb63e86464933f9f66ff67bd6ebcce146e0815a5787ce3f58ae7", 0x3d}, {&(0x7f0000002100)="b72e2a5788f6b9b7c147a9e6b2d742776d5fbbeae7586234bfa2f5323ddd9b5e7e8e885dc8988aa556e15ec808680dffa7e4ca3c1bbeec49b17ffece9a9cf70cccc62dc666c897287e777db080e96501fa27e31bbe22244ba646f2b55180f1cac5a59a28df5333b4df6d6a8f83", 0x6d}, {&(0x7f0000002180)="0c2e72652d5e3e85d9d0bab9e5edebda6394b9cb9811bda1d13d52b938e76ba9a5555243a88aac2fb37dd6f910cba70586bf4554792dd37e6718309a25e736a9a37449b49a1b36f52b14475bdb18e2748ad721b0bab116a840f76636ac81712fc16a1c24978d", 0x66}, {&(0x7f0000002200)="d03ce4b1a4b6497c997a9ed89d25497758f3ab0e45c2d18cce3368c5ea872e05d3d74c3b885312a5e609e2095471d236c8856e6a935a9273c18f0529b7fdb09b2a2874b6cbb57b9682d4b5070cb31a051363a8b7cb8a", 0x56}, {&(0x7f0000002280)="804e44313222be5a9246307fe214aea82f07e68152211a5ae0f2957a72c5a0a4d9fc969cab8b99d7cad1908f2f4937afa661052d19a7ba5d852e42841500310c7939748ba41bb834f7705df4e207cd2c01e5dc9e2285ea3fb4023dd07d0560d8fdcd5b46f18d407b3b6f31b85a1e685bab1fb70cc9428c1396c353ed423af5d106eaa4ddd0e2784c6b6893e3e525", 0x8e}, {&(0x7f0000002340)="2c99e96cad8e6e1f214238eb4ce52b7b88603a4cb42177898cda419620e9e2ce3dbe619075fceb9a46fc2bd1c646e68a4bb6153a85b40a5fafe8c140f12d80bfc9346d386f5695846b9a8c2704759d045b921db68f5a306c70809bd1d4601525ace2e1691fdff314613a641475f4b42196274ee2ce68197df9acb57a3e19ee59e436a896c5615dc192adeeee9fe3c317371d8cfacf050fe5", 0x98}], 0x8, &(0x7f0000002480), 0x2d8}}, {{&(0x7f0000002780)=@nfc={0x27, 0x0, 0x1, 0x4}, 0x80, &(0x7f00000028c0)=[{&(0x7f0000002800)="89b26d97614bc42fa6b297963bfaa9ce60abbfaa85d56ab9ccd4774e5a9fd2c18744c387f09b858263af0ff27890357478222f3d7fb29d3492a31071320a0ca2cbb963c62cbd25fbf5f06bb0cb227e28c28af4e00c7f4855e10338a47bc81cecf1b5bf55ababcf693d", 0x69}, {&(0x7f0000002880)}], 0x2, &(0x7f0000002900)=[{0xe8, 0x119, 0x9c, "634644f6e674830fe1191b9cc3fc2ea662bcf7123c0b1c02e04f0b6ade4a3bca5e7a90640702ab0e2771180f1f6f8843484c04799396ddee43068c4013d6685e207d1ba45f519c2512e5ad2c109f8f92317ebf0fc8e9247abb604fd70fb5764db2461d364dfb9530c4a48afd4344c2d2437e6a8032c3d82626954d8921f83eefce454a2bde35c23a71197f92e494a9bede044204db67e2ca8cec7b0e28de020c1cc9865f7e5b931ee789f127c54577f1107b3d024d8feb985aa84a78091311cc677c0fc8cec857495acaf4917f7dffafff7a8143751e0f"}, {0x50, 0x3a, 0x5, "548b5617988c70d2372b2d41af3feba6b4c8097674036a346365a3ed343d55ed8a608e65399b79637b6cad4ab6f1d63ceb51f14466d43797ad2fa62aca"}, {0x80, 0x0, 0x400, "9744a82068f52c62758f4e3418d97f39a1cb17a17f6926f5a9f752f06a1f40841a5d30901253de8a2420a0682669ea8fdaec831a6812df479fca2b374587e005b30cb4a97b665fc7f3de14ff378478afab088497f4131f48c9a20f83e7620bc40eb56f192c0cb22c1604"}, {0xb0, 0x10b, 0x0, "20bf4d6fa9b3f0277a135e399a7461644eb04c71f93231931faecdf46c8e4027ccd46379fb82b195386733e732e514496887edea451f2516ff7e3da748f377bc9fca72eacd288ca647138aff321be4a41e37fe5ab7c35837f6a7a2e4f916268e4646878991bb388b5acfe8e7079c4430cd7dc0d4078769d9f81619a040eec7630947f7f4bcfdc99b6354d32b9c1a36da28fafe8aff2573f19e"}, {0x90, 0x113, 0xfff, "04f36d842a080a09c7e38067e0690bdbd7dd4dd0e4bf627bba68769a22800b9424770883062c9de9b2c0caced759dcd6473925d6eb709257ef73dae1ef2bfae1bf0e5ef591bfcb770cdb3d6023c25d39ed712b699804228cd7784c89cdd17556b053367d8d1cc7ba8f18a117e0ce1659ce2dab87c9eb6def11c213ab6be6996c"}, {0x48, 0x101, 0xb7f, "55953cd4a9d72a86f154df71d4e38fb2b2cb1f085a96307f11223bf2b155c1e1cf4e52b0f21893c222b3de3527016ea5967db54be23f"}], 0x340}}], 0x5, 0x0) 15:11:11 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000024c0)=[{&(0x7f0000001300)}, {0x0}], 0x2, 0x0) r0 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000a40)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000080)='rxrpc_s\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000024c0)=[{&(0x7f0000001300)}, {0x0}], 0x2, 0x0) r1 = add_key(&(0x7f0000000080)='rxrpc_s\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$instantiate_iov(0x14, r1, &(0x7f00000024c0)=[{&(0x7f0000001300)}, {0x0}], 0x2, 0x0) request_key(0x0, 0x0, &(0x7f0000000b00)='\x00', r1) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r0) r3 = add_key(&(0x7f0000000080)='rxrpc_s\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100), 0x0, r2) keyctl$instantiate_iov(0x14, r3, &(0x7f00000024c0)=[{&(0x7f0000001300)}], 0x1, 0x0) r4 = add_key(&(0x7f0000000080)='rxrpc_s\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$instantiate_iov(0x14, r4, &(0x7f00000024c0)=[{&(0x7f0000001300)}, {0x0}], 0x2, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x20600) prctl$PR_GET_TIMERSLACK(0x1e) fstat(0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x25adcbb11e86344f, 0x0) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000000140)={'nat\x00', 0x0, 0x11, 0x90, [], 0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x108) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000c00)=ANY=[@ANYRESDEC, @ANYRES32=0x0], &(0x7f0000003800)=0x2) r7 = socket(0x2, 0x803, 0xff) connect$inet(r7, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="c828000037503f67bdb4254f4e4ab8b62c9e6fb00d5c648a3ab811962f85a28a29817a2cb21d72940edc1dc7b48cbba8180f4928f17d78dfe506c7baabccb34dbd9ecbf29f3389757c08ddb000831b7e2dd66a75b52550988d2eac384be73bd6bbd11af07df74c9f81254b333945ab5011e15727f8106435486aeeea6c681e7965682523f792e22c759d51815c389fd793744fe2e8dc1a6499d895179ecb2454efb6ee3ded4375bd81", @ANYRES32=0x0], 0x0) socket(0x2, 0x803, 0xff) 15:11:11 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$notify(r0, 0x402, 0x19) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='udf\x00', 0x0, &(0x7f0000000200)=',\x00\x00\x9f\x9b2\x96\xd9k\xb2[@u\xab\xf6\xb1W\x10&h\x19\xe2\x98\xf1\x9a\x16\xf9\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00F\xd3\xc4\x02\xfd\x8cpO3\xb2J\xad\x8d\xcd\'VAW\xb7\xcb\xf6\x02k\xfe\xc9\x16\xff5:\xaa\x93\x893$\xf6\xab\x00\x11\xca\x1d\xc7\xce\xf4J\xf5Rp\xf4\xff\xe8\xbc\xdf\xf0\xdc\x86\xa5I\"\xe9XF,\xca\xdc\x93p\x88\xdd\x9fZ<4@w\xd2\x05\x06z\xd8b\xf0\x95-\xfb\xf0\x12\x89\xa6\x1fl\x84?m\x1a\xe2\xc0\xc5\xb58\xed\x18Q\xdc\xb0\x84-Y\xc7\xcczh\xdb\xc5\x0ei\xc2\xd0\xdc\x8f}\x9b\xa0.b\xd7\xc3z2\xe8J\xe4\x01\xeau)x') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x90) fcntl$setstatus(r2, 0x4, 0x80000000002c00) r3 = dup(r2) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x68, r4, 0x604, 0x70bd29, 0x25dfdbfb, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x10001, @link='syz0\x00'}}}, ["", "", "", "", ""]}, 0x68}}, 0x40040) r5 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 150.232709] print_req_error: I/O error, dev loop1, sector 64 [ 150.242802] print_req_error: I/O error, dev loop1, sector 256 [ 150.251295] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 150.329804] print_req_error: I/O error, dev loop1, sector 512 [ 150.339512] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 15:11:11 executing program 4: r0 = open(0x0, 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) [ 150.397355] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 150.424594] UDF-fs: Scanning with blocksize 512 failed [ 150.465637] print_req_error: I/O error, dev loop1, sector 64 [ 150.472212] print_req_error: I/O error, dev loop1, sector 512 [ 150.480145] net_ratelimit: 2 callbacks suppressed [ 150.480151] protocol 88fb is buggy, dev hsr_slave_0 [ 150.491257] protocol 88fb is buggy, dev hsr_slave_1 [ 150.502999] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 150.526103] print_req_error: I/O error, dev loop1, sector 1024 [ 150.532512] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 150.554916] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 150.573010] UDF-fs: Scanning with blocksize 1024 failed [ 150.588701] print_req_error: I/O error, dev loop1, sector 64 [ 150.595503] print_req_error: I/O error, dev loop1, sector 1024 [ 150.602254] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 150.622837] print_req_error: I/O error, dev loop1, sector 2048 [ 150.629510] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 150.650961] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 150.667769] UDF-fs: Scanning with blocksize 2048 failed [ 150.682601] print_req_error: I/O error, dev loop1, sector 64 [ 150.688995] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 150.710240] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 150.720132] protocol 88fb is buggy, dev hsr_slave_0 [ 150.725371] protocol 88fb is buggy, dev hsr_slave_1 [ 150.738176] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 150.748235] UDF-fs: Scanning with blocksize 4096 failed [ 150.757034] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) 15:11:12 executing program 2: clone(0x2000004100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000000)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x4) ptrace$cont(0x4201, r0, 0x0, 0x719000) ptrace$setregs(0xffffffffffffffff, r0, 0x9, &(0x7f0000000040)="8a6cce366a725537e6f929c031be2b1e229a8b7ef20761570ace8a5cece9b7b1aa003ea219e90090d1d45aba1534c26810ecc0823acaac5eaee84a0194acac5d0ac1eee11b4362f162ca2f07ca9c21204f44975a5bd3ad364bd9b7ae70c9e17edc28e5f6093a36ef156f72d0d867c579d938798a9f6b9a34e48ab056d0c28e85e10e4f5c5c5dab242ef5911a560a866f8dd331993f1b8b97067d2a3a501d6e5c4093c45ed2bca8bb22a752415a3f96112592bb07967933642ab53019b1ca101b") [ 150.807538] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 150.835852] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 15:11:12 executing program 5: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000040)=0x2, 0x4) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) tkill(r1, 0x1002000000016) [ 150.864425] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 150.883983] UDF-fs: Scanning with blocksize 512 failed [ 150.914735] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 150.957848] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 150.984737] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found 15:11:12 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r5, @ANYBLOB="dcda0baf62285ed0443c"]) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r7 = socket(0x0, 0x400000400080803, 0x0) r8 = dup(r7) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000001700)=0xe8) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r9}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', r9}) r11 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r11, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r12 = socket(0x0, 0x400000400080803, 0x0) dup(r12) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000300)=0xffffffffffffff76) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r13}) sendmsg$nl_route(r3, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="9d4900001a00010021bd1c017956e8292eedc328bd7000ffdbf3250a80a82d06", @ANYRES32=r5, @ANYBLOB="0c0009000900a901", @ANYRES32=r10, @ANYBLOB="14000500fe8000000000000000000000000000aa08000100", @ANYRES32=r13], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup(r15) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) ioctl$GIO_UNISCRNMAP(r16, 0x4b69, &(0x7f0000000180)=""/232) setsockopt$SO_ATTACH_FILTER(r14, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 151.006311] UDF-fs: Scanning with blocksize 1024 failed [ 151.025921] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 151.052947] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 151.074258] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 151.090266] UDF-fs: Scanning with blocksize 2048 failed 15:11:12 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0x0, @loopback}}, 0x0, 0x5, 0x0, "434e1e27af3f45b339cce7f55beaff3020c419516a1e17b8e6db299d2c14ef331fb472c369e37cfb848175386828a7f2aad55100000000000000080000200000000000000000ffe900"}, 0xd8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x2000000000001) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000000c0), 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TIOCLINUX7(r5, 0x541c, &(0x7f0000000280)={0x7, 0x81}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) shmat(r8, &(0x7f0000fee000/0x2000)=nil, 0x5000) r9 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r10 = shmat(r9, &(0x7f0000fee000/0x2000)=nil, 0x5000) shmdt(r10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f00000007c0)=ANY=[@ANYRESOCT, @ANYRESHEX=r8, @ANYRESOCT=r10], 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000), 0xc) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x1, 0x6, 0x2f8, 0x3, 0x7, 0x9061, 0x7fff, {0x0, @in={{0x2, 0x4e20, @loopback}}, 0xff, 0x100, 0xe843, 0x2, 0x1}}, &(0x7f0000000080)=0xb0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000100)={r11, 0xe145}, &(0x7f0000000240)=0x8) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r12, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r12, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r13, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r13, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r13, 0x6, 0x16, &(0x7f00000006c0)=[@window={0x3, 0x0, 0x8}], 0x1) setsockopt$inet6_MCAST_MSFILTER(r13, 0x29, 0x30, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x90) fcntl$setstatus(r13, 0x4, 0x80000000002c00) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r13, 0x6, 0x16, &(0x7f00000006c0), 0x0) setsockopt$inet6_MCAST_MSFILTER(r12, 0x29, 0x30, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x90) fcntl$setstatus(r12, 0x4, 0x80000000002c00) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r12, 0x6, 0x1d, &(0x7f00000002c0), &(0x7f0000000400)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = dup(r14) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) r16 = socket$inet6_sctp(0xa, 0x6, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r16, 0x84, 0x64, &(0x7f00000000c0), 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000700)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r16, 0x84, 0x72, &(0x7f0000000000)={r17}, 0xc) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r15, 0x84, 0x75, &(0x7f0000000680)={r17, 0x7fff}, 0x8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0x5}, 0x1c) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) [ 151.101721] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 151.120712] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 151.141604] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 151.158699] UDF-fs: Scanning with blocksize 4096 failed [ 151.169910] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) 15:11:12 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000fed000/0x1000)=nil, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xffffffffffffff0e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000001d80)) accept$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x10010000000035) r4 = getpgid(r3) sched_getattr(r4, &(0x7f0000000480)={0x30}, 0x30, 0x0) fchdir(r2) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000300)={0x5, 0x70, 0x0, 0x5, 0x0, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000001, 0x1}, 0x21c8, 0x0, 0x0, 0x0, 0x9, 0x400, 0x2}, 0xffffffffffffffff, 0x4000, 0xffffffffffffffff, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r8) getsockopt$sock_timeval(r8, 0x1, 0x14, &(0x7f0000001d00), &(0x7f0000001d40)=0x10) dup(r7) sendmmsg(r6, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000080)="53dd63de8e5327a99607464830c3d3b8a598241becae1140d51007da6639975c4051814d1198d17b375c53846f94901a83350fa2fd0d2212c141968354b829824fabe6270424eb9b48380ea006e909727d9fed4f1d6530d6c96a6238b200d71f8b63f5c413", 0x65}, {&(0x7f0000000140)="87a53a3e63bce87e97ae1a031d9208acd4e2afb4584713377fd77f8a826a8d0cc1b0750a85d1b1ba4d9f1c4fa2f96dd0c4d23e2415a77efd833ec122e84055ef67a8387ad9e4009ad1c6fbbc15ec75d9986f21bb232fa013af1c33cbdc1fc780862c37ee692e85ac894b9cc9f2933130d748bcb502918950f1643cb317f5861d52e34aa10a87e492", 0x88}, {&(0x7f0000000200)="8a653eeda15b2d2a1dddac586123e670fd45bc0db736b2381007daf9330595f66823ee196f2f6b422a5f4ccac55df1174fb7049a6652473532cdd3616844921320bdbd4ea91413953f0430abf00ca7bec3a283a75b54777c5646bbdde3367a8081fbebe09f99b27b203386134d32bc9711cbd76db66809c73805517a02104cd94756064de0363280262178e93ae1258045e2bb4a1a7214ffa12c14b99eba", 0x9e}, {&(0x7f0000000400)="e4475f9fa859027e56fab572db87e2871c6d8bb6ba52fdfa149ed26ba1fc31fcdedc4a8ff2cecef77f52318d6fd915843ab8bbfe138a0a58d84ae4c7500e7350b10aac3fbea5e1eadfca5dd87e959db9088939", 0x53}, {&(0x7f0000000640)="2a3387a7509f8ca6b6978a26d248c7fd0c1a960aca70ea9cd87213696b503b251322d2e392cd179f80e62b4d4875b09b1054db476d734ed533c67ea88e6626c4c0602e30d573f14b499e4c658ef9204d43a18a8ae60076937bbba3bd8bcedee3512b6e0ca43746c7d448755d6c27e0e9cc5e4e5f2131c199580ed4239477a6e0faabe4063fb9e556d783c0dc1743c66fe32e729cadbb539299ebdf2882843c8ab7f0bbb2936c6ff1c77e5205cd0b5c0898535a5697084aa1bf6578d0e2a7d8b7f90968606d3311c9d600ed4d4454201d8baffaebbe5ecf96c04552fa65d1352c0c31b368d0c83c8add321742648fe0c33f", 0xf1}, {&(0x7f0000000740)="81649ecf99f6ba3f176df033b066bb9084ab789ae53fb27659fdbe4c1640db05a5d3de4ec89fd7e01539f00078e5ff97a59b36e558ed5f894204c05ce0365173f642e94b6a5c06f3cdcea1e78a798261f3f7beea9f2659b0d865afe279c2f1b881c7d72dfe6093d283e0dc6aee4e296f1d2434141ee0f9905fe6fc08012ed8c66dc81db7c51a048215a2da18f9d438489326c6b7027bfdee92c4e2e90a5af8afcc9daafda68f885a436a8afca2b001d405f24d67b357a92ed29697d1cabc2166a2a0142eb46902fa602283d85fdf0f3739ce83ca23bb5058707c5a54d82d907bad9ff0a8daa1d75b03ad5d", 0xeb}, {&(0x7f0000000840)="0174edcfaaa9de174ca0db9b04b6532daa9ca2b2edbdcfbfee625dd6a4e0646b76598a3cfcff237d3d1adfc0c6f3b20661710360325b2201ad3e2d1450bb472adfad7147cf104ba67c22700708bff7f838302514754b6a93a51a87568fcbb4b880363b47515d9b1c66b2338c7382d16943e039728c5ca3a7af939ce757d915016942580e6d8dc58986651b4bdde9858559", 0x91}, {&(0x7f00000002c0)="c00d86324a65e1", 0x7}, {&(0x7f0000000380)="2ad4126b9485679d9ef0674cf7c53e", 0xf}], 0x9, &(0x7f00000009c0)=[{0xc8, 0xff, 0x400, "88a24a398bcd22bde8f39bf2f5165363b7ce9e2d3be7d47b85c922561434fcb079e9fd38c8c59ee968e8762ac76e22410b5036ae3f3068fa68dcd9f7dee5cf175c55ffbd34cf3593f6c82c9a7eef9eca1d4017c82daf2f40624494be3fce241825bba60ee03d0912a4b43b22c5bc6db9df3c34bfc10d62d4ddbc649b4e20c2b878c0fc1a67cea41529085b104ff1924e31dc6b41169d0c40dd90559ea1e1f4a53314f0ab6009f8619f527e82d60aaa681ace2d54a4029ada"}, {0x38, 0x112, 0x4, "e98dfac88bb10d729b561e09915b346e1af0060f16365d362d9d699b9f0c4b55cf851c"}, {0x108, 0x10f, 0x1000, "eb457c4809ad7dd0d2faa4e4341b99adc865f0360f9d7acc9b20d831fcf1039a02643cf10c95f9ebe6542fc478f630cea51cc79c580c0990a4a91ce7731af8b87b18d5ff358dbca12d027bacdd11fd5a05246ff6d2562fb16a57d6e570aab20067aff86c006cdf919c57b4f5c15928c6c0f1189c33a17da7169c3dec1264bceaef77c87482de1d40591e3e1c26def0913f1b43f6fadbe59f0077b5f4be9c1d0c50ed8c96156d95be04a9336b529fef36876d6cb6036db6e9bca8a13e7d7cf85c86429a4803bce61e6f126ce433e04e487f3aa3ae2e3e97da3a6891713a3ee617732a4afefe28be0c2f7349944b1de1167b98f99e7756"}, {0x60, 0x10d, 0xd1, "07b54113036258aca10042e3f96daaa4c5b28350ffdb6cef615618c18f1c7f32a9d06f812ad67043d06bcee349ddb003ce7e4a1a0387b16fda94e0c3d41a542b76ba7c60cc1717d6f382c90d26"}, {0x50, 0x0, 0x9, "1e69c8a4a24fe8c7da3f15b2b4522930ec7c623a2933554ba03bc58ebe54d32d8f4ccb492510f765ed2c0071ae2746ca6cb171e8c2dea5e8283f8d136c4606"}, {0x70, 0x108, 0xfffffffa, "735ff543c179f8569bc4d5f9720c0d215ccba8635eea9f2722091cbc304e4f9a1be644cffb7d7ae8706396a2b4039422d85215609a5a92d72952ecc08a7c3efcb110021c533ed6b6b234f2b6a7148e9218a31351c6683fc23b26"}, {0x48, 0x109, 0x3, "779c477e8bb580d6bcbbeeae10aea2b256e0da82abaaaafdc79bff48c84c5e67e92ec34adf763c81b2060c2d715c218e9d72c761"}], 0x370}}, {{&(0x7f0000000d40)=@pptp={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000480)}], 0x1, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x150}}, {{&(0x7f0000000f80)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4, 0x2, 0x0, 0x1}}, 0x80, &(0x7f0000001200)=[{&(0x7f0000001000)="fdc6c8a3820054e559ce0773c165f348991b998e46ceb6a592ccceb7e920b0d32003ed3f66dc3fe25298f9136d302c2605a2ebcd8ef7c6e0179cd483acf1a435c1f4439d67424785d0f0e1dbdf371b21fbde3ea7e90c26d4ea9db688e4f6a2b0baf069d8da815d22f538205decd98d5779cc56a57c0327e0020137d908007927d232fbd3c95979e45208898ea851a965f9b55e248e80ba3f164056c4c79b85463996a24fd0b81631f7e040940b96b9ed393cc96ac792988d691d4a8732ba706f5767577116c9b99665c3a6088144979bd12f8db00635bd75ee2c7329", 0xdc}, {&(0x7f0000001100)="4edf949e4800a623295932ce673ac69667c71052cec5c0059410915e69f9c7b92268f8b9f7066134b198802332e4c57743110626fd71669f3a23eb5755e4396d143d5f1eb445d3d6eaf4a669421a9e2c7f019a106699807b1d1b3cd6ac09dff1ff62d15c85a85a5d291693e3e0778677498521022c6e6358c533614b361a422f4b2b17bb457764ac4d27407c59cecc3c16740b7123fa0221686f075e12c27cf2cd59deb919305feee7b7064b3f0b0407038f46a279557158c3249a4493da0e195012c8b1c28126431d0b0970fbcedd3a8ce39e35851b977d05f91bfbf8", 0xdd}], 0x2, &(0x7f0000001240)=[{0x88, 0x1f, 0xffffffff, "f627f958198c226547cc2ccc803448de8abc4967c1b468ebe3508bac1bed01a95b28cc1e0d2d350e1efe68ca3338585e72c13ce733b2e7e3a8fb53c80e143d7ed79ee9e5615735cf1ba390872e982abdc1c5f583e674366c47e8dbf606ef63d6e96898433e11462b138f7e9e72c795808b5daaba"}, {0x40, 0x112, 0xfffffff8, "5f1bf204ae589be30331e5a71a2fa49663750f4ec4842cc348b1933ad40d9c0e8bc866c4a502132d093f19f6f8657a7f"}, {0x30, 0x110, 0xffffff52, "cc42eea3f86f44ab4710f64005838c89f830af39c9f8d3e409bc"}, {0x40, 0x1, 0x5, "152e516f9acea7fb2dbbc19154f2708ef57c4d76100779ba733e1a79e7d2634e6f689286da42761e7dcb99231fe56a"}, {0x10, 0x104, 0xb}, {0xb8, 0x119, 0xfaf, "0123a75073b77248e2f2ca1beec5446705ff3efdd6c9f24597ae8aa6afc54a754dc545dbfbc884acd63ff65afb2b10cc35de4999087330c68ff053a58a1b32ab5a745c05e7f8ccb2b67e07e044e4356f84455ee6d9395dfc489cb078807c56446ef2cab7a61a5653c713abfbb5b9d0949cb109d9fff41cd9747c364c36eaccfd6b9deb90b8460a22c9288479ead6ea18fde683381204a7fea1f72ac9e4577c5801b0d71523ab34"}, {0x78, 0x110, 0x1ff, "6c017ea8f9bfeafaff526c14622a8aff3c9066fb405a2cea96e6ff7bf4236d371b60212e870300ee70711329e1297b9c2c3b64c431a84e21abb73a305dd58316d82e23ec6e098dcb9c2394cbc92b5293e99582eb2dc0a0f1ddee1c868cb20b93a21f51f1fe2c81"}, {0x48, 0x118, 0x7, "d3cdc08d81790ccaf6ed4114d796dd2acc4e3d7bd3d09810e71e91579861aacacd5052ba82d858155af20715fce62078f3e9a128da829c"}, {0xf8, 0x60, 0x4, "992ef2b0f90d53eb88eb372c39377229b2dd9f69001dc16d5714e64793f17f1c1cf38b616cc38b3102fda87c85f500a784325b4cb2e61a94b5ddc44e5d2bb2540b4fe00a78246537a4a005feb3961197e21d080eaf7f2c15b4c5f5655e0cd99ff2c3a71fd2eda91409ba0e19659d95dfc28aa0654cc671acf89de29295686f2a08bca1ecfa69bcad7b36e1610d0f09dd5db567dc71d458c08bf47d31c9b7b48bb1015c11108bac9618b448749ce89490e0e67b79f83858af40b6887b9ae109371c30f61400e60d6d0bbfdf70b9fd0f37c984a4f59dbb83ed2549a6ee1c1f9cabff2afa"}], 0x3b8}}, {{&(0x7f0000001600)=@ipx={0x4, 0x7ff, 0x9060, "52e1f953acea", 0x80}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001680)="ddadc4849db6a14f90706ee80bf43963b7beca81c641aba2f041cef20f8a38f418b188424d7be94cced3719241b0a7c1a0874306635e2f5da4cccf0bc4326270d924d08f06044609a7d3638c062ddd35cb41510ed8b28b2d71569a3f5be56af9132062e0f61752e3c1bbeb2c98bdc4942d06a19152", 0x75}, {&(0x7f0000001700)="dd6482ca2f301eed05f94ebaa7b914a3180e856db64e0b2bcdd2d048ce0e8db1d71d9f61dcc4406c22b67f7c6e591eafcc0c2d46a8f78b278a3b2180", 0x3c}], 0x2, &(0x7f0000001780)=[{0x48, 0x10b, 0x100, "25a8d646ce68c47e18bfb7213ecbe042f648e720fca6d3126f91c04f4eb7509c3ad7b2a188d8c0caeb7a356bdd564c14cc"}, {0xe8, 0x111, 0x3, "111d9c431b4de4bdb51c9ff9a98b13211fea89b444a1af6a05dfca634007f8f213cbba501f744c9392fd5d721a2707697c400a1498a9ba40658b74a8560ea7502a9b150e745498838fc72e625152efef9ac26f18e68c68d1e8e03899835c9a59196621036d8a464adc3d0b10c09a5c1c52c10df967f6d275336fd74c1d57ef24eec691d58326875220266f39b034b049c5d3cbc948ace55a0d1ff2f819fd911c85b0cbd3d183dfdfa670cfdf2c4ee009d9f432181cdd8947f81173732b0034510b94e29955871e25dccc4db84933305b16441e74"}, {0xc8, 0x9, 0x0, "0daf8344ea80da43348266f28c3d528935d2da7726cb84929fc0b1b5dae7c507e1d7fe7c4d8451d425beb62fedf5d14c960da971218e2aa96924fd9ebfa1ce636f59ddc27ce03814613e3c93e93e9127581060765f33164943b8cf3de9a697108f4df49981a20b9469ba5e3bf49407f7acab7c8598657870339d84430a217850a6828f51d3bdd025eb8533ccf1edcc7fda02d02495106b73963bb472bbc1024249df5f0896e58f4dd5dbe684b7b0c5f33e"}, {0x40, 0xfcb973ba7df55c91, 0x5, "63b5f25685202b6f5251f11de2a9366b0d17c76a1f87344a02ec1495f912f5db2bbacd5f9fc4bdf8e5399b83"}, {0xd0, 0x20c, 0x0, "1a5d0f7767c68da7326f45f5105e93049c9b516e8c488456a291c2b1f0bf113b0a5eb77b7ad1034e56c0b41f50adbf9dffa8ef4bc167c8ce15bb054a678d75bc5e96caaecc60935f5a0bec5f6de5bfbb47a176deeb9e11cb9789b19c16ee35711751f1448b95e13d8a625d10fd27220a0bf516d342c8aa9e3e4eb0b69e1cf0103400a037bf9ea583ee2cb4d44cee48e9ecdb90ae7b82649e77214560d1c75eef4a3f99010a3aa1d51a800b3ff5f4d84636ab995786af3231fb9d"}, {0x78, 0x115, 0x7fffffff, "02d529b7de27c021980c9b4f76b21f7a44d673545ea828f413a8182787047ba4870c10e57c8ccb88294a0307eab68ee8abbf770e1ea9b3f921e7d1f3e10433c2292214e4871914fd8fc2ad12760d09834c3d720640c9d5f00503d37cc8a04f96217989baad"}, {0xf0, 0x103, 0x80000000, "9730ef153b3d75898beab7f2237b1c7e0ced89b7cdd97e8ec4466847433148c52fd5064d3c65bfab3d6d5451fa23d51eec0ecc0b178fa22c87fa4c23ccbbb16166cf29230ec5d70ee712eccc144f8f4cfc72640d66e68c11c15dca0d49a9e02dd02c5750b1730b90174d5b356e70f7629db3d96081f4bb06f016a24ffa776a6db81e5e38db7cdf9b6f56c6f88df107513dc66457206468fe1b758bd3c017cdca7a455d54626aca42105c42d20604f23715fb5fd992741ae2df28f229582910b5f27fa62130fe86492b8d4ce649be25ce3b0d4dea052e6aa9e6da0f3957"}], 0x470}}], 0x4, 0x0) 15:11:12 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:11:12 executing program 0: r0 = accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80000) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x0, 0x2) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x4bd, @empty, 0x2}, {0xa, 0x4e20, 0x9, @remote, 0xed9}, r9, 0x80}}, 0x48) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) socket$inet(0x10, 0x3, 0xc) 15:11:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0xffffffffffffffcb, 0x0, 0x0, 0x0, 0x1f6}}], 0x4f3, 0x2, 0x0) 15:11:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0xffffffffffffffcb, 0x0, 0x0, 0x0, 0x1f6}}], 0x4f3, 0x2, 0x0) 15:11:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0xffffffffffffffcb, 0x0, 0x0, 0x0, 0x1f6}}], 0x4f3, 0x2, 0x0) 15:11:13 executing program 5: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:11:13 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r5, @ANYBLOB="dcda0baf62285ed0443c"]) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r7 = socket(0x0, 0x400000400080803, 0x0) r8 = dup(r7) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000001700)=0xe8) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r9}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', r9}) r11 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r11, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r12 = socket(0x0, 0x400000400080803, 0x0) dup(r12) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000300)=0xffffffffffffff76) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r13}) sendmsg$nl_route(r3, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="9d4900001a00010021bd1c017956e8292eedc328bd7000ffdbf3250a80a82d06", @ANYRES32=r5, @ANYBLOB="0c0009000900a901", @ANYRES32=r10, @ANYBLOB="14000500fe8000000000000000000000000000aa08000100", @ANYRES32=r13], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup(r15) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) ioctl$GIO_UNISCRNMAP(r16, 0x4b69, &(0x7f0000000180)=""/232) setsockopt$SO_ATTACH_FILTER(r14, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) 15:11:13 executing program 5: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:11:13 executing program 1: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:11:13 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r5, @ANYBLOB="dcda0baf62285ed0443c"]) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r7 = socket(0x0, 0x400000400080803, 0x0) r8 = dup(r7) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000001700)=0xe8) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r9}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', r9}) r11 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r11, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r12 = socket(0x0, 0x400000400080803, 0x0) dup(r12) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000300)=0xffffffffffffff76) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r13}) sendmsg$nl_route(r3, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="9d4900001a00010021bd1c017956e8292eedc328bd7000ffdbf3250a80a82d06", @ANYRES32=r5, @ANYBLOB="0c0009000900a901", @ANYRES32=r10, @ANYBLOB="14000500fe8000000000000000000000000000aa08000100", @ANYRES32=r13], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup(r15) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) ioctl$GIO_UNISCRNMAP(r16, 0x4b69, &(0x7f0000000180)=""/232) setsockopt$SO_ATTACH_FILTER(r14, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) 15:11:13 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:11:13 executing program 0: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000040)=0x2, 0x4) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) tkill(r1, 0x1002000000016) 15:11:13 executing program 5: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:11:13 executing program 1: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:11:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="3e2e650f011a650f01c566b852054ae40f23c00f21f86635020004000f23f80f005ef20f20e06635400000000f22e0baf80c66b82c3e758866efbafc0c66b8f900000066ef66b899ac32680f23d80f21f86635400000600f23f8660f388148e1f30fa7d066b88000c0fe0f23c00f21f86635010003000f23f8", 0x79}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) lstat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0xa, 0x441000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:11:14 executing program 5: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:11:14 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r5, @ANYBLOB="dcda0baf62285ed0443c"]) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r7 = socket(0x0, 0x400000400080803, 0x0) r8 = dup(r7) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000001700)=0xe8) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r9}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', r9}) r11 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r11, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r12 = socket(0x0, 0x400000400080803, 0x0) dup(r12) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000300)=0xffffffffffffff76) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r13}) sendmsg$nl_route(r3, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="9d4900001a00010021bd1c017956e8292eedc328bd7000ffdbf3250a80a82d06", @ANYRES32=r5, @ANYBLOB="0c0009000900a901", @ANYRES32=r10, @ANYBLOB="14000500fe8000000000000000000000000000aa08000100", @ANYRES32=r13], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup(r15) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) ioctl$GIO_UNISCRNMAP(r16, 0x4b69, &(0x7f0000000180)=""/232) setsockopt$SO_ATTACH_FILTER(r14, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) 15:11:14 executing program 1: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:11:14 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:11:14 executing program 5: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:11:14 executing program 0: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:11:14 executing program 1: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfff4) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newtfilter={0x74, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x44, 0x2, [@TCA_RSVP_POLICE={0x40, 0x5, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) 15:11:14 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0xaa, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:11:14 executing program 5: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:11:14 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000000)) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), 0x4) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @local}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) r3 = socket$unix(0x1, 0x8000000000000005, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@gid={'gid', 0x3d, r4}}]}) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file1\x00', 0x8000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000100)="78e8a9bcf86f10b5b8ada0fa4c137f7903ff956c30c7edbc34d2c102e4f6bc873f66ca2739be783d6dacef4ac50ebebe1c934b46fe984bacab510b8abcda503c32aa7260685a2e577e4671620d994a10fe648d823a1e83ea98376c406ae0b910ec54db2bb7bc3296f6fbf84fff2e73db6fc9d49232f6f32afbc80932eab34fdcbafd98616d51ad85a5f7f397c990d8407f14379f4371964262d22c3ca32e01409fdf2c0d0029d7ac4d43c7a6b833dcff8f3b063743186b77cdb086ae98037cff0f7f4a17162dc1d6ff4a344f44e9c61498eb86f55318eb51eca849893943ac344bcd1f", 0xe3, 0xfffffffffffffffc}], 0x100022, &(0x7f00000003c0)={[{@nocompress='nocompress'}, {@map_normal='map=normal'}, {@session={'session', 0x3d, 0x28}}, {@uid={'uid', 0x3d, r2}}, {@overriderock='overriderockperm'}, {@sbsector={'sbsector', 0x3d, 0x6}}, {@check_strict='check=strict'}, {@mode={'mode', 0x3d, 0x9}}, {@gid={'gid', 0x3d, r4}}], [{@fsname={'fsname', 0x3d, 'selinux'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@measure='measure'}]}) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000d7, 0x0) 15:11:14 executing program 1: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:11:14 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x10, 0x2, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x90) fcntl$setstatus(r1, 0x4, 0x80000000002c00) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000040)={0x6, {{0xa, 0x4e23, 0xc11e, @mcast2, 0x150}}}, 0x88) write$FUSE_DIRENTPLUS(r0, &(0x7f00000006c0)={0x290, 0x0, 0x0, [{{0x0, 0x0, 0xbcb, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x2, 0x400}}}, {{0x2, 0x0, 0x0, 0x0, 0x0, 0xcf, {0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3f}}, {0x0, 0x0, 0x4, 0x1, 'eth1'}}, {{0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, {0x0, 0x442a, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x81, 0xee01, 0x0, 0x2}}, {0x0, 0xfffffffffffffc00, 0x8, 0x0, '/lonodev'}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x6, 0x3000, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}, {0x0, 0x0, 0x10, 0x5, 'veth1_to_bridge\x00'}}]}, 0x290) 15:11:15 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r5, @ANYBLOB="dcda0baf62285ed0443c"]) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r7 = socket(0x0, 0x400000400080803, 0x0) r8 = dup(r7) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000001700)=0xe8) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r9}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', r9}) r11 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r11, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r12 = socket(0x0, 0x400000400080803, 0x0) dup(r12) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000300)=0xffffffffffffff76) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r13}) sendmsg$nl_route(r3, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="9d4900001a00010021bd1c017956e8292eedc328bd7000ffdbf3250a80a82d06", @ANYRES32=r5, @ANYBLOB="0c0009000900a901", @ANYRES32=r10, @ANYBLOB="14000500fe8000000000000000000000000000aa08000100", @ANYRES32=r13], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup(r15) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) ioctl$GIO_UNISCRNMAP(r16, 0x4b69, &(0x7f0000000180)=""/232) setsockopt$SO_ATTACH_FILTER(r14, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) 15:11:15 executing program 0: mkdir(&(0x7f0000000700)='./file1\x00', 0x0) mkdir(&(0x7f00000005c0)='./file0\x00', 0x0) r0 = getuid() lstat(&(0x7f0000000940)='./file0\x00', 0x0) r1 = socket(0x10, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(0x0, r2, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000100000000000000", @ANYRES32, @ANYBLOB="02", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0200", @ANYBLOB, @ANYBLOB="040000000000000008000000", @ANYBLOB, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="10000600000000002000000000000000"], 0xe, 0x0) lstat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x90) fcntl$setstatus(r5, 0x4, 0x80000000002c00) r6 = dup2(r1, r5) write$P9_RSYMLINK(r6, &(0x7f0000000180)={0x14, 0x11, 0x1, {0x4, 0x0, 0x4}}, 0x14) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r8, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000200", @ANYRES32=r4, @ANYBLOB="02000500", @ANYRES32=r8, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=r8, @ANYBLOB="02000300", @ANYRES32=r4, @ANYBLOB="040000000000000008000000", @ANYRES32=r9, @ANYBLOB="08000300", @ANYRES32=r9, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10000600000000002000000000000000"], 0x6c, 0x0) mount$9p_virtio(&(0x7f0000000080)='overlay\x00', &(0x7f00000000c0)='./file1\x00', &(0x7f0000000140)='9p\x87', 0x70000, &(0x7f0000000480)={'trans=virtio,', {[], [{@fowner_lt={'fowner<', r0}}, {@fowner_gt={'fowner>', r2}}, {@fowner_lt={'fowner<', r8}}, {@pcr={'pcr'}}, {@fsname={'fsname', 0x3d, 'overlay\x00'}}]}}) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300)='overlay\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1']) chdir(&(0x7f0000000040)='./file0\x00') open$dir(0x0, 0x200000, 0x8) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfffffffffffffc00}, 0x2000, 0x0, 0x0, 0x8, 0x26, 0x0, 0x401}, 0x0, 0x5, r6, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x800000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x0) unlink(&(0x7f0000000840)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') 15:11:15 executing program 5: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:11:15 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:11:15 executing program 3: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:11:15 executing program 1: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) [ 154.091511] kauditd_printk_skb: 2 callbacks suppressed [ 154.091520] audit: type=1804 audit(1570461075.434:60): pid=7927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir684005504/syzkaller.GjcBj4/26/file0" dev="sda1" ino=16567 res=1 [ 154.138340] overlayfs: failed to resolve './file1x}ÿ': -2 15:11:15 executing program 1: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:11:15 executing program 5: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:11:15 executing program 3: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:11:15 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r5, @ANYBLOB="dcda0baf62285ed0443c"]) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r7 = socket(0x0, 0x400000400080803, 0x0) r8 = dup(r7) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000001700)=0xe8) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r9}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', r9}) r11 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r11, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r12 = socket(0x0, 0x400000400080803, 0x0) dup(r12) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000300)=0xffffffffffffff76) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r13}) sendmsg$nl_route(r3, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="9d4900001a00010021bd1c017956e8292eedc328bd7000ffdbf3250a80a82d06", @ANYRES32=r5, @ANYBLOB="0c0009000900a901", @ANYRES32=r10, @ANYBLOB="14000500fe8000000000000000000000000000aa08000100", @ANYRES32=r13], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup(r15) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) ioctl$GIO_UNISCRNMAP(r16, 0x4b69, &(0x7f0000000180)=""/232) setsockopt$SO_ATTACH_FILTER(r14, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 15:11:15 executing program 0: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:11:16 executing program 5: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:11:16 executing program 1: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:11:16 executing program 3: syz_open_dev$ndb(0x0, 0x0, 0x20000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='lotrusted\x1a\x00', 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0xa7b1c24e6eb67ef2, 0x0) dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) r1 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x36656510, 0x8000) ioctl$VIDIOC_G_INPUT(0xffffffffffffffff, 0x80045626, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000700)=""/117) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x1) write$P9_RREAD(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="1a3ce226d586bf90a52bee8fcc8c3acd5cb113fadca3758d612ca43ba496b1e7772f10dc1a2a5651467a657588cdd60b93c759fd72a0f1e3e4f00b70d26c1388f61372b4cad82779937cc4733ec1ed1f1e3be5d815beedde3496d71099b3188f62763267114ecc3f5c3907ae55e7fca6c1c9342eca4675836f2313c550fd5f7869fa379a4c70d1a8a369db91b7ae7713ea7752eae4c459cfc494d4ef81aa1ad0f20bbdc96c26d42051704f397f3755"], 0xaf) sendmsg$sock(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000440)=@ethernet={0x306, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f00000004c0)="6e80da94260c9985c4b28954746124d1fd92653bec9f8e745edbc77ce31030e7eb1c7782ecd0c00b5a3064173e856b37a773891fbb76b1b043a4d0703be9d53c477545109cda2ab25a7b3157063965d960c798ca228747df62064b65e313da4af48ac3a9ad3d20722f3f15c3881a11c6b300", 0x72}, {&(0x7f0000000540)="4b46814106f3b70efd7c2f77dcd4650a2fa4e4f2f4eb46521c1f39c596f5e27d668f5eac3f4f727a6a7efca9ae019b0712f1d3a993c86b66b03d00b22c3f2066398f2f7aa5adc0ade20f9d944730de87fe3b77a9fe790366dc0fa76a190c899a", 0x60}], 0x2}, 0x10000010) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@remote}}, {{@in=@multicast2}, 0x0, @in6}}, &(0x7f0000000780)=0xe8) sendmsg$nl_generic(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000110}, 0xc, &(0x7f0000000240)={0x0}}, 0x801) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000cfc000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x10010000000035) ptrace$cont(0x23, r5, 0x1, 0x5) ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000040)={0x1, 0x0, @ioapic={0xd000, 0x6, 0x7, 0x0, 0x0, [{0x1, 0xa3d}, {0x8d, 0x101, 0x3e4000, [], 0x401}, {0x9, 0xffffffffae033535}, {0x6f, 0x21a, 0x0, [], 0x100000000}, {0x6, 0x53f, 0x5, [], 0x7}, {0x5, 0x3, 0x1b1}, {0x5, 0x0, 0x0, [], 0x9}, {0x1000, 0x0, 0x4d89, [], 0x5}, {0xe, 0x7, 0x7, [], 0xfffffffffffffff8}, {0x9, 0x7fff, 0x0, [], 0x4}, {0x2, 0x3, 0xc23}, {0x0, 0x7, 0x8001, [], 0x1020000}, {}, {0x1, 0x5}, {0x0, 0x0, 0x7ff, [], 0x1}, {0x8000, 0x8, 0x4b8d, [], 0x966}, {0x32ef, 0x6, 0x80000000, [], 0x3}, {0xfff, 0x80000000, 0x0, [], 0x100000001}, {0x3ff, 0x800, 0x1}, {0x0, 0x0, 0x8}, {0x6, 0x81, 0x6}, {0x3}, {0x7ff, 0x2, 0x80, [], 0x3ff}, {0x0, 0x0, 0x5, [], 0x8}]}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 15:11:16 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:11:16 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001cc0)='./file0\x00', &(0x7f0000001d00)='sysfs\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x90) fcntl$setstatus(r0, 0x4, 0x80000000002c00) r1 = dup(r0) ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='security.capability\x00', 0x0, 0x0) [ 154.973801] audit: type=1400 audit(1570461076.284:61): avc: denied { map } for pid=7981 comm="syz-executor.3" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=29996 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:hugetlbfs_t:s0 tclass=file permissive=1 15:11:16 executing program 5: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:11:16 executing program 1: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:11:16 executing program 3: syz_open_dev$ndb(0x0, 0x0, 0x20000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='lotrusted\x1a\x00', 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0xa7b1c24e6eb67ef2, 0x0) dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) r1 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x36656510, 0x8000) ioctl$VIDIOC_G_INPUT(0xffffffffffffffff, 0x80045626, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000700)=""/117) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x1) write$P9_RREAD(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="1a3ce226d586bf90a52bee8fcc8c3acd5cb113fadca3758d612ca43ba496b1e7772f10dc1a2a5651467a657588cdd60b93c759fd72a0f1e3e4f00b70d26c1388f61372b4cad82779937cc4733ec1ed1f1e3be5d815beedde3496d71099b3188f62763267114ecc3f5c3907ae55e7fca6c1c9342eca4675836f2313c550fd5f7869fa379a4c70d1a8a369db91b7ae7713ea7752eae4c459cfc494d4ef81aa1ad0f20bbdc96c26d42051704f397f3755"], 0xaf) sendmsg$sock(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000440)=@ethernet={0x306, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f00000004c0)="6e80da94260c9985c4b28954746124d1fd92653bec9f8e745edbc77ce31030e7eb1c7782ecd0c00b5a3064173e856b37a773891fbb76b1b043a4d0703be9d53c477545109cda2ab25a7b3157063965d960c798ca228747df62064b65e313da4af48ac3a9ad3d20722f3f15c3881a11c6b300", 0x72}, {&(0x7f0000000540)="4b46814106f3b70efd7c2f77dcd4650a2fa4e4f2f4eb46521c1f39c596f5e27d668f5eac3f4f727a6a7efca9ae019b0712f1d3a993c86b66b03d00b22c3f2066398f2f7aa5adc0ade20f9d944730de87fe3b77a9fe790366dc0fa76a190c899a", 0x60}], 0x2}, 0x10000010) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@remote}}, {{@in=@multicast2}, 0x0, @in6}}, &(0x7f0000000780)=0xe8) sendmsg$nl_generic(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000110}, 0xc, &(0x7f0000000240)={0x0}}, 0x801) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000cfc000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x10010000000035) ptrace$cont(0x23, r5, 0x1, 0x5) ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000040)={0x1, 0x0, @ioapic={0xd000, 0x6, 0x7, 0x0, 0x0, [{0x1, 0xa3d}, {0x8d, 0x101, 0x3e4000, [], 0x401}, {0x9, 0xffffffffae033535}, {0x6f, 0x21a, 0x0, [], 0x100000000}, {0x6, 0x53f, 0x5, [], 0x7}, {0x5, 0x3, 0x1b1}, {0x5, 0x0, 0x0, [], 0x9}, {0x1000, 0x0, 0x4d89, [], 0x5}, {0xe, 0x7, 0x7, [], 0xfffffffffffffff8}, {0x9, 0x7fff, 0x0, [], 0x4}, {0x2, 0x3, 0xc23}, {0x0, 0x7, 0x8001, [], 0x1020000}, {}, {0x1, 0x5}, {0x0, 0x0, 0x7ff, [], 0x1}, {0x8000, 0x8, 0x4b8d, [], 0x966}, {0x32ef, 0x6, 0x80000000, [], 0x3}, {0xfff, 0x80000000, 0x0, [], 0x100000001}, {0x3ff, 0x800, 0x1}, {0x0, 0x0, 0x8}, {0x6, 0x81, 0x6}, {0x3}, {0x7ff, 0x2, 0x80, [], 0x3ff}, {0x0, 0x0, 0x5, [], 0x8}]}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 155.125410] audit: type=1804 audit(1570461076.374:62): pid=7993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir684005504/syzkaller.GjcBj4/27/file0" dev="sda1" ino=16598 res=1 15:11:16 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r5, @ANYBLOB="dcda0baf62285ed0443c"]) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r7 = socket(0x0, 0x400000400080803, 0x0) r8 = dup(r7) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000001700)=0xe8) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r9}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', r9}) r11 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r11, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r12 = socket(0x0, 0x400000400080803, 0x0) dup(r12) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000300)=0xffffffffffffff76) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r13}) sendmsg$nl_route(r3, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="9d4900001a00010021bd1c017956e8292eedc328bd7000ffdbf3250a80a82d06", @ANYRES32=r5, @ANYBLOB="0c0009000900a901", @ANYRES32=r10, @ANYBLOB="14000500fe8000000000000000000000000000aa08000100", @ANYRES32=r13], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = dup(r14) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) ioctl$GIO_UNISCRNMAP(r15, 0x4b69, &(0x7f0000000180)=""/232) 15:11:16 executing program 1: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:11:16 executing program 5: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, 0xffffffffffffffff, 0x0) tkill(r1, 0x1002000000016) 15:11:17 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:11:17 executing program 5: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, 0xffffffffffffffff, 0x0) tkill(r1, 0x1002000000016) 15:11:17 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x973, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x392d}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5}}, 0xe8) creat(&(0x7f00000004c0)='./bus\x00', 0x0) connect$inet6(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)) listen(0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46802) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r3, 0x0) ftruncate(r1, 0x48280) r4 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') write$P9_RATTACH(r4, &(0x7f0000000080)={0x14, 0x69, 0x0, {0x3c}}, 0x14) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000100)={0x20002, 0x0, [0x8001, 0x4, 0x702, 0x7, 0x7, 0x1, 0x3, 0x1000]}) 15:11:17 executing program 1: r0 = creat(&(0x7f0000000680)='./bus\x00', 0x6) fcntl$setstatus(r0, 0x4, 0x46000) lseek(r0, 0x4200, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) fallocate(r1, 0x4000000000000010, 0x0, 0x7fff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r5, 0x0, 0x8400fffffffa) creat(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f00000000c0), 0x0) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r11, 0x84, 0x72, &(0x7f0000000000)={r13}, 0xc) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r10, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r13, 0x1}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r8, 0x84, 0x6d, &(0x7f0000000200)={r14, 0x6b, "810a95b8d06cfa685aaf96da05008fd28cb449c9d14e7d23a892720bb6f1554125fe022a7fa08fc15983668696eacd36135ef34e108cd60cbf0236bb1e2690603c5937176132dc4bcbcd78ccd791da35bd2cc2e4343566f44068615b900719fa0005cecec1c5bb8504e095"}, &(0x7f0000000280)=0x73) ioctl$PERF_EVENT_IOC_ID(r7, 0x80082407, &(0x7f0000000040)) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r15, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r15, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r15, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_MCAST_MSFILTER(r15, 0x29, 0x30, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"/711], 0x90) fcntl$setstatus(r15, 0x4, 0x80000000002c00) shutdown(r15, 0x1) 15:11:17 executing program 0: syz_mount_image$gfs2(&(0x7f0000000ac0)='gfs2\x00', &(0x7f0000000b00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7375696464697238722be145c3a8d039872e00"]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000000c0), 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="e842b1760e969b2925b760ffbf3746", @ANYRES32=0x0], 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={r4}, 0xc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000180)={r4, 0x7363, 0x50, 0xeb, 0x3}, &(0x7f00000001c0)=0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_EDITDEST(r6, 0x0, 0x489, &(0x7f0000000000)={{0x67, @multicast2, 0x4e24, 0x2, 'sed\x00', 0xa99b25a78f20c7b9, 0x100, 0x2f}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x4e22, 0x4, 0x0, 0x5, 0x3}}, 0x44) r7 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x800, 0x501440) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f0000000100)="ec87b5c98251d23c4c1d4281636b7bcf", 0x10) [ 155.799924] audit: type=1804 audit(1570461077.144:63): pid=8046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir684005504/syzkaller.GjcBj4/28/file0" dev="sda1" ino=16553 res=1 15:11:17 executing program 5: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, 0xffffffffffffffff, 0x0) tkill(r1, 0x1002000000016) [ 155.925149] gfs2: invalid mount option: suiddir8r+áEèÐ9‡. [ 155.965278] gfs2: can't parse mount arguments 15:11:17 executing program 5: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) [ 155.989875] audit: type=1804 audit(1570461077.274:64): pid=8051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir306563173/syzkaller.wxb0m4/44/bus" dev="sda1" ino=16599 res=1 [ 156.062317] audit: type=1804 audit(1570461077.304:65): pid=8054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir201502642/syzkaller.G3OPw5/29/bus" dev="sda1" ino=16606 res=1 15:11:17 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r5, @ANYBLOB="dcda0baf62285ed0443c"]) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r7 = socket(0x0, 0x400000400080803, 0x0) r8 = dup(r7) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000001700)=0xe8) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r9}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', r9}) r11 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r11, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r12 = socket(0x0, 0x400000400080803, 0x0) dup(r12) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000300)=0xffffffffffffff76) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r13}) sendmsg$nl_route(r3, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="9d4900001a00010021bd1c017956e8292eedc328bd7000ffdbf3250a80a82d06", @ANYRES32=r5, @ANYBLOB="0c0009000900a901", @ANYRES32=r10, @ANYBLOB="14000500fe8000000000000000000000000000aa08000100", @ANYRES32=r13], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = dup(r14) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) [ 156.120711] audit: type=1804 audit(1570461077.324:66): pid=8054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir201502642/syzkaller.G3OPw5/29/bus" dev="sda1" ino=16606 res=1 15:11:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]}, 0x1ad) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) [ 156.148428] audit: type=1804 audit(1570461077.334:67): pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.1" name="/root/syzkaller-testdir306563173/syzkaller.wxb0m4/44/bus" dev="sda1" ino=16599 res=1 [ 156.223236] audit: type=1804 audit(1570461077.554:68): pid=8054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir201502642/syzkaller.G3OPw5/29/file0/bus" dev="sda1" ino=16592 res=1 15:11:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]}, 0x1ad) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) 15:11:17 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x973, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x392d}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5}}, 0xe8) creat(&(0x7f00000004c0)='./bus\x00', 0x0) connect$inet6(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)) listen(0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46802) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r3, 0x0) ftruncate(r1, 0x48280) r4 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') write$P9_RATTACH(r4, &(0x7f0000000080)={0x14, 0x69, 0x0, {0x3c}}, 0x14) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000100)={0x20002, 0x0, [0x8001, 0x4, 0x702, 0x7, 0x7, 0x1, 0x3, 0x1000]}) 15:11:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff01000000050000000900000000000000003508af8bea00106cf4aa4ac99e8d000000006c6f000000000000000000000000000100000000000000000000000010000010010000000000000000000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1ad) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) 15:11:17 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:11:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]}, 0x1ad) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) [ 156.496673] audit: type=1804 audit(1570461077.844:69): pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir306563173/syzkaller.wxb0m4/44/bus" dev="sda1" ino=16599 res=1 15:11:18 executing program 0: r0 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xff, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x9) bind$isdn_base(0xffffffffffffffff, &(0x7f0000000040), 0x6) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000004c0)=ANY=[@ANYBLOB="2f6465762f080000000000725c6012ee577d3cff3a92869a7830b914d02eb75bfe1bdff97ac275b463884eba7399f1217a2d2498cd0918ffb546f272be7db7a0de212ab58895d1ae8137f305e0a33da957bd36e55b1f06228bae6f8f51560a3074147a7bf7b6310662409335c7673bb1fd904d204e2a8b17ba8b1bc14025d3856e5b1499800541d86cb0f5a4b05fb88ae2b8e84b809d55ae9c8b895ead28bfaf000000000000007373265bc44d2ae97491d9e5671cb22b23596878d910ddfae2c6922f80bf4e31c18d32c8b7fc9235000020bc62cdf7a12ca48ec9570000"], &(0x7f0000000280)='./file0\x00', &(0x7f0000000140)='ntfs\x00', 0x0, 0x0) bpf$BPF_MAP_FREEZE(0x16, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') r1 = gettid() r2 = socket$unix(0x1, 0x8000000000000005, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@gid={'gid', 0x3d, r3}}]}) lchown(&(0x7f0000000200)='./file0\x00', 0xee01, r3) r4 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x400, 0x341) r5 = creat(0x0, 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f00000000c0)=0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, &(0x7f00000005c0)) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_NOTIFY(r4, &(0x7f00000001c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCAP(r7, 0x80685600, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/pid\x00') 15:11:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) r1 = accept4(r0, &(0x7f00000001c0)=@tipc, &(0x7f00000000c0)=0x80, 0x0) sysinfo(&(0x7f0000000000)=""/22) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000d200000011000000"]}}, 0x0) r3 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, 0x0) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000400)={{0x0, 0x2}, 0x2}, 0x10) sendmsg$TIPC_NL_MON_SET(r1, 0x0, 0x20001004) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) r4 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x03\x00', @ifru_flags}) 15:11:18 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r5, @ANYBLOB="dcda0baf62285ed0443c"]) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r7 = socket(0x0, 0x400000400080803, 0x0) r8 = dup(r7) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000001700)=0xe8) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r9}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', r9}) r11 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r11, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r12 = socket(0x0, 0x400000400080803, 0x0) dup(r12) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000300)=0xffffffffffffff76) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r13}) sendmsg$nl_route(r3, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="9d4900001a00010021bd1c017956e8292eedc328bd7000ffdbf3250a80a82d06", @ANYRES32=r5, @ANYBLOB="0c0009000900a901", @ANYRES32=r10, @ANYBLOB="14000500fe8000000000000000000000000000aa08000100", @ANYRES32=r13], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r14) 15:11:18 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:11:20 executing program 5: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:11:20 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x973, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x392d}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5}}, 0xe8) creat(&(0x7f00000004c0)='./bus\x00', 0x0) connect$inet6(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)) listen(0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46802) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r3, 0x0) ftruncate(r1, 0x48280) r4 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') write$P9_RATTACH(r4, &(0x7f0000000080)={0x14, 0x69, 0x0, {0x3c}}, 0x14) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000100)={0x20002, 0x0, [0x8001, 0x4, 0x702, 0x7, 0x7, 0x1, 0x3, 0x1000]}) 15:11:20 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x3, 0x2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000000c0), 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={r4}, 0xc) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={r4, 0x1}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000002c0)={r5, @in={{0x2, 0x4e23, @broadcast}}, [0xffffffff, 0x19f80000, 0x8, 0x6, 0x13, 0x7, 0x9, 0x7, 0x1, 0x2, 0x1, 0xb03, 0x5, 0x1, 0x3848]}, &(0x7f0000000200)=0x100) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040), 0xfdd91) clone(0x2000000002840100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000000)=0xd489, 0x4) rt_sigqueueinfo(r6, 0x1f, &(0x7f00000000c0)={0x0, 0x0, 0xffffffff}) ptrace$setopts(0x4206, r6, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x101200) 15:11:20 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:11:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) r1 = accept4(r0, &(0x7f00000001c0)=@tipc, &(0x7f00000000c0)=0x80, 0x0) sysinfo(&(0x7f0000000000)=""/22) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000d200000011000000"]}}, 0x0) r3 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, 0x0) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000400)={{0x0, 0x2}, 0x2}, 0x10) sendmsg$TIPC_NL_MON_SET(r1, 0x0, 0x20001004) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) r4 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x03\x00', @ifru_flags}) 15:11:20 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r5, @ANYBLOB="dcda0baf62285ed0443c"]) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r7 = socket(0x0, 0x400000400080803, 0x0) r8 = dup(r7) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000001700)=0xe8) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r9}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', r9}) r11 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r11, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r12 = socket(0x0, 0x400000400080803, 0x0) dup(r12) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000300)=0xffffffffffffff76) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r13}) sendmsg$nl_route(r3, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="9d4900001a00010021bd1c017956e8292eedc328bd7000ffdbf3250a80a82d06", @ANYRES32=r5, @ANYBLOB="0c0009000900a901", @ANYRES32=r10, @ANYBLOB="14000500fe8000000000000000000000000000aa08000100", @ANYRES32=r13], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) 15:11:20 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8), 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) [ 159.129591] kauditd_printk_skb: 3 callbacks suppressed [ 159.129600] audit: type=1804 audit(1570461080.474:73): pid=8162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir201502642/syzkaller.G3OPw5/31/bus" dev="sda1" ino=16628 res=1 15:11:20 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) accept4$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000180)=0x10, 0x80000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='dummy0\x00', 0xa) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='vxcan1\x00', 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000400), 0x7) 15:11:20 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8), 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:11:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000d00000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="69000000907800003d0a16c610a69ded30aa77489f6ec02d71cdabfc747bde2421e71fb8be9987fd810d1ff854b65dabcb00000000dc9ef312f9bdba5c35ab39fa0f50816f3d5eac31985c55919b5a621f77c4bf9df4de394b181203694c3a2876f4ab3b3b315103f34f5fec754e08b078d449343b9a2e6debc9f7b97852d5b385b71c8d2e984cc6254a81d6921465505fec0b9bd6"], 0x0) 15:11:20 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8), 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) [ 159.350757] audit: type=1804 audit(1570461080.584:74): pid=8153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir201502642/syzkaller.G3OPw5/31/bus" dev="sda1" ino=16628 res=1 15:11:20 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r5, @ANYBLOB="dcda0baf62285ed0443c"]) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r7 = socket(0x0, 0x400000400080803, 0x0) r8 = dup(r7) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000001700)=0xe8) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r9}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', r9}) r11 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r11, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r12 = socket(0x0, 0x400000400080803, 0x0) dup(r12) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000300)=0xffffffffffffff76) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r13}) sendmsg$nl_route(r3, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="9d4900001a00010021bd1c017956e8292eedc328bd7000ffdbf3250a80a82d06", @ANYRES32=r5, @ANYBLOB="0c0009000900a901", @ANYRES32=r10, @ANYBLOB="14000500fe8000000000000000000000000000aa08000100", @ANYRES32=r13], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) 15:11:23 executing program 0: gettid() msgctl$MSG_INFO(0x0, 0xc, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{0x0}, {0x0}], 0x2) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) symlink(&(0x7f0000000180)='./file1\x00', &(0x7f0000000140)='./file1/file0\x00') r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="b5935c2940fd1ba4871d1031b533e00b48"], 0x1e) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000580)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) link(&(0x7f00000001c0)='./file1/file0\x00', &(0x7f0000000240)='./file2\x00') r1 = getuid() mount$9p_rdma(&(0x7f00000003c0)='127.0.0.1\x00', &(0x7f0000000440)='./file1/file0\x00', &(0x7f0000000480)='9p\x00', 0x1000, &(0x7f0000000700)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@rq={'rq', 0x3d, 0x4}}, {@rq={'rq'}}, {@sq={'sq', 0x3d, 0x80}}, {@sq={'sq', 0x3d, 0x9}}, {@rq={'rq', 0x3d, 0x2}}, {@timeout={'timeout', 0x3d, 0x241}}, {@sq={'sq', 0x3d, 0x401}}], [{@euid_eq={'euid', 0x3d, r1}}]}}) lsetxattr$security_smack_transmute(&(0x7f0000000080)='./file0/file1/file0\x00', &(0x7f0000000100)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x0) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f0000000180)={0x9, @null=' \x00'}, 0x12) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfffffffffffffe30, 0xfa00, {0x0, &(0x7f00000000c0), 0x0, 0x2}}, 0x297) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000a40)=ANY=[@ANYBLOB="010000003f000000fcffffff0000050001000000000000004477674520ed72d0f336184779133cbd7d616c77a1839f65302ce79c123bf9a07ce2b33d0534b797e9948a17394a593b896162216997586967cbe7f945b218a8679ef5a55e42eca0ad24a23978237b719f0f0c9bbfef8c6edecd94b206d0fc02646963ad20cc0cfd375f22d6f51db2264092c7352c6f15fbe335312f11a3"]) close(0xffffffffffffffff) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000000)={0xf, 0x8, 0xfa00, {r3}}, 0x10) r4 = syz_open_dev$sndpcmc(&(0x7f0000000340)='/dev/snd/pcmC#D#c\x00', 0x100000001, 0x84000) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000380)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000600)={0x10, 0xffffffffffffff1a, 0xfa00, {&(0x7f0000000040), 0x3, {0xa, 0x4e23, 0xfffffffd, @ipv4={[], [], @broadcast}, 0x7fff}, r3}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) sendto$isdn(0xffffffffffffffff, &(0x7f0000000880)={0x1, 0x0, "dd8198f8cd3de958a6283bae3adeaba1146b5d5dc6607c45f330b64c96816236f29cc057866579d5a174f47446af9d4abed93da1ad4c1cdfb6579b28a13987d5dbb98439041acf05541e2d3083d9dfd653eed581a63dc13441adc03c8bfb5ea13c5a9d69fc9d1b7bc26f1bf69a0a551dfb2c724445423430614c4f9d76cbf8a1b4034cb4778ab5db0fd5a1fe2d4c6ceebf97704a9340b48938dce520a3c0f6f7a0b30276236f03c043f58ee51da4d72f18e579ae8f82675c38a23893147656505cca5d863a0fa74ac7fa52990c6d609cfd8f1a742730573c5e4daa5fb11554f083e74a031fb2cae4"}, 0xf0, 0x0, &(0x7f0000000980)={0x22, 0x0, 0x7, 0x1f, 0x5}, 0x6) openat(0xffffffffffffffff, &(0x7f00000006c0)='./file2\x00', 0x0, 0x2) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x38d00c92cff06ac5, &(0x7f0000000140)=""/170, 0x0) 15:11:23 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xff, 0x40, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x1}, 0x8) listen(r1, 0xffff) getpgrp(0xffffffffffffffff) stat(0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x0, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000340)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000001d00)) geteuid() fcntl$getown(r0, 0x9) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) stat(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0) getpid() getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000005000)={{{@in6, @in6=@initdev}}, {{}, 0x0, @in6=@local}}, &(0x7f0000005100)=0xe8) getgid() getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000005ac0)) getresuid(0x0, 0x0, 0x0) getgroups(0x0, 0x0) gettid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000006740), &(0x7f0000006780)=0xc) fstat(r1, &(0x7f0000006c80)) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) close(r4) 15:11:23 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:11:23 executing program 5: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:11:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) close(r0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0xb) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) accept4$x25(r1, &(0x7f0000000180), &(0x7f00000001c0)=0x12, 0x80400) connect(r1, 0x0, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) setuid(0x0) ftruncate(r3, 0x200004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f00000000c0), 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000000)={r8}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r10, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000280)={r8, 0x1, 0x400, 0x7, 0x40, 0x6, 0x1, 0x2, {r11, @in6={{0xa, 0x4e23, 0x200, @rand_addr="3fbd9988e52616faa11e20494584ca4d"}}, 0x80000001, 0x494, 0x2, 0x1, 0xa9}}, &(0x7f0000000340)=0xb0) 15:11:23 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r5, @ANYBLOB="dcda0baf62285ed0443c"]) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r7 = socket(0x0, 0x400000400080803, 0x0) r8 = dup(r7) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000001700)=0xe8) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r9}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', r9}) r11 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r11, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r12 = socket(0x0, 0x400000400080803, 0x0) dup(r12) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000300)=0xffffffffffffff76) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r13}) sendmsg$nl_route(r3, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="9d4900001a00010021bd1c017956e8292eedc328bd7000ffdbf3250a80a82d06", @ANYRES32=r5, @ANYBLOB="0c0009000900a901", @ANYRES32=r10, @ANYBLOB="14000500fe8000000000000000000000000000aa08000100", @ANYRES32=r13], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) 15:11:23 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:11:23 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) [ 162.306886] overlayfs: filesystem on './file0' not supported as upperdir 15:11:23 executing program 0: gettid() msgctl$MSG_INFO(0x0, 0xc, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{0x0}, {0x0}], 0x2) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) symlink(&(0x7f0000000180)='./file1\x00', &(0x7f0000000140)='./file1/file0\x00') r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="b5935c2940fd1ba4871d1031b533e00b48"], 0x1e) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000580)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) link(&(0x7f00000001c0)='./file1/file0\x00', &(0x7f0000000240)='./file2\x00') r1 = getuid() mount$9p_rdma(&(0x7f00000003c0)='127.0.0.1\x00', &(0x7f0000000440)='./file1/file0\x00', &(0x7f0000000480)='9p\x00', 0x1000, &(0x7f0000000700)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@rq={'rq', 0x3d, 0x4}}, {@rq={'rq'}}, {@sq={'sq', 0x3d, 0x80}}, {@sq={'sq', 0x3d, 0x9}}, {@rq={'rq', 0x3d, 0x2}}, {@timeout={'timeout', 0x3d, 0x241}}, {@sq={'sq', 0x3d, 0x401}}], [{@euid_eq={'euid', 0x3d, r1}}]}}) lsetxattr$security_smack_transmute(&(0x7f0000000080)='./file0/file1/file0\x00', &(0x7f0000000100)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x0) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f0000000180)={0x9, @null=' \x00'}, 0x12) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfffffffffffffe30, 0xfa00, {0x0, &(0x7f00000000c0), 0x0, 0x2}}, 0x297) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000a40)=ANY=[@ANYBLOB="010000003f000000fcffffff0000050001000000000000004477674520ed72d0f336184779133cbd7d616c77a1839f65302ce79c123bf9a07ce2b33d0534b797e9948a17394a593b896162216997586967cbe7f945b218a8679ef5a55e42eca0ad24a23978237b719f0f0c9bbfef8c6edecd94b206d0fc02646963ad20cc0cfd375f22d6f51db2264092c7352c6f15fbe335312f11a3"]) close(0xffffffffffffffff) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000000)={0xf, 0x8, 0xfa00, {r3}}, 0x10) r4 = syz_open_dev$sndpcmc(&(0x7f0000000340)='/dev/snd/pcmC#D#c\x00', 0x100000001, 0x84000) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000380)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000600)={0x10, 0xffffffffffffff1a, 0xfa00, {&(0x7f0000000040), 0x3, {0xa, 0x4e23, 0xfffffffd, @ipv4={[], [], @broadcast}, 0x7fff}, r3}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) sendto$isdn(0xffffffffffffffff, &(0x7f0000000880)={0x1, 0x0, "dd8198f8cd3de958a6283bae3adeaba1146b5d5dc6607c45f330b64c96816236f29cc057866579d5a174f47446af9d4abed93da1ad4c1cdfb6579b28a13987d5dbb98439041acf05541e2d3083d9dfd653eed581a63dc13441adc03c8bfb5ea13c5a9d69fc9d1b7bc26f1bf69a0a551dfb2c724445423430614c4f9d76cbf8a1b4034cb4778ab5db0fd5a1fe2d4c6ceebf97704a9340b48938dce520a3c0f6f7a0b30276236f03c043f58ee51da4d72f18e579ae8f82675c38a23893147656505cca5d863a0fa74ac7fa52990c6d609cfd8f1a742730573c5e4daa5fb11554f083e74a031fb2cae4"}, 0xf0, 0x0, &(0x7f0000000980)={0x22, 0x0, 0x7, 0x1f, 0x5}, 0x6) openat(0xffffffffffffffff, &(0x7f00000006c0)='./file2\x00', 0x0, 0x2) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x38d00c92cff06ac5, &(0x7f0000000140)=""/170, 0x0) 15:11:23 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000), 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:11:23 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xff, 0x40, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x1}, 0x8) listen(r1, 0xffff) getpgrp(0xffffffffffffffff) stat(0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x0, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000340)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000001d00)) geteuid() fcntl$getown(r0, 0x9) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) stat(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0) getpid() getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000005000)={{{@in6, @in6=@initdev}}, {{}, 0x0, @in6=@local}}, &(0x7f0000005100)=0xe8) getgid() getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000005ac0)) getresuid(0x0, 0x0, 0x0) getgroups(0x0, 0x0) gettid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000006740), &(0x7f0000006780)=0xc) fstat(r1, &(0x7f0000006c80)) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) close(r4) 15:11:23 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000), 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:11:23 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r5, @ANYBLOB="dcda0baf62285ed0443c"]) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r7 = socket(0x0, 0x400000400080803, 0x0) r8 = dup(r7) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000001700)=0xe8) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r9}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', r9}) r11 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r11, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r12 = socket(0x0, 0x400000400080803, 0x0) dup(r12) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000300)=0xffffffffffffff76) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r13}) sendmsg$nl_route(r3, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="9d4900001a00010021bd1c017956e8292eedc328bd7000ffdbf3250a80a82d06", @ANYRES32=r5, @ANYBLOB="0c0009000900a901", @ANYRES32=r10, @ANYBLOB="14000500fe8000000000000000000000000000aa08000100", @ANYRES32=r13], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8001) 15:11:23 executing program 1: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:11:24 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000), 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:11:26 executing program 5: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:11:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_GET_SPEED(r2, 0x551f) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000001c0)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x8000, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) connect$bt_l2cap(r6, &(0x7f0000000140)={0x1f, 0x1, {0x3, 0x0, 0x0, 0x75, 0x3, 0x3f}, 0x51, 0x30}, 0xe) bind$llc(r4, &(0x7f00000000c0)={0x1a, 0x103, 0x2, 0x6, 0x20, 0x7f, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1135f844b649f3c2}}, 0x10) r7 = getpgid(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f00000003c0)={{0x8, 0xa, 0x5, 0x6, 'syz1\x00', 0xae3}, 0x0, 0x1, 0x10001, r7, 0x0, 0x3, 'syz0\x00', &(0x7f0000000180), 0x0, [], [0x6, 0x1db, 0xfffa, 0x6]}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 15:11:26 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xff, 0x40, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x1}, 0x8) listen(r1, 0xffff) getpgrp(0xffffffffffffffff) stat(0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x0, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000340)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000001d00)) geteuid() fcntl$getown(r0, 0x9) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) stat(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0) getpid() getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000005000)={{{@in6, @in6=@initdev}}, {{}, 0x0, @in6=@local}}, &(0x7f0000005100)=0xe8) getgid() getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000005ac0)) getresuid(0x0, 0x0, 0x0) getgroups(0x0, 0x0) gettid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000006740), &(0x7f0000006780)=0xc) fstat(r1, &(0x7f0000006c80)) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) close(r4) 15:11:26 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(0xffffffffffffffff, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:11:26 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r5, @ANYBLOB="dcda0baf62285ed0443c"]) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r7 = socket(0x0, 0x400000400080803, 0x0) r8 = dup(r7) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000001700)=0xe8) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r9}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', r9}) r10 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r10, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r11 = socket(0x0, 0x400000400080803, 0x0) dup(r11) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000300)=0xffffffffffffff76) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r12}) 15:11:26 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(0xffffffffffffffff, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:11:26 executing program 5: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:11:26 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xff, 0x40, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x1}, 0x8) listen(r1, 0xffff) getpgrp(0xffffffffffffffff) stat(0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x0, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000340)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000001d00)) geteuid() fcntl$getown(r0, 0x9) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) stat(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0) getpid() getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000005000)={{{@in6, @in6=@initdev}}, {{}, 0x0, @in6=@local}}, &(0x7f0000005100)=0xe8) getgid() getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000005ac0)) getresuid(0x0, 0x0, 0x0) getgroups(0x0, 0x0) gettid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000006740), &(0x7f0000006780)=0xc) fstat(r1, &(0x7f0000006c80)) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) close(r4) 15:11:26 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(0xffffffffffffffff, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:11:26 executing program 0: mount$fuse(0x0, 0x0, 0x0, 0x2081835, 0x0) r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x800, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r4, 0x0, 0x7, &(0x7f0000000180)=0x7179, 0x10000012d) setsockopt$inet_int(r4, 0x0, 0x6, &(0x7f0000000000)=0xe8, 0x4) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x10) sendto$unix(r4, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r4, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000140)=0xa5d6) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="9f000000", @ANYRES32=0x0], 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={r6}, 0xc) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000180)={r6, 0x400, 0x1}, &(0x7f00000001c0)=0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x18, r8, 0x701, 0x0, 0x0, {0x13, 0x0, 0x1a0ffffffff}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x1a0, r8, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MEDIA={0xfc, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xef}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xaddb}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x57}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf5ad}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb32}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_BEARER={0x7c, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x25c0}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'ip6_vti0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x2e, @empty, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xea, @rand_addr="020c56853fbbab1db123b4731007adec", 0x639903f7}}}}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x20004810}, 0x84) openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x40, 0x0) [ 165.538289] raw_sendmsg: syz-executor.0 forgot to set AF_INET. Fix it! 15:11:27 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r5, @ANYBLOB="dcda0baf62285ed0443c"]) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r7 = socket(0x0, 0x400000400080803, 0x0) r8 = dup(r7) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000001700)=0xe8) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r9}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', r9}) r10 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r10, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r11 = socket(0x0, 0x400000400080803, 0x0) dup(r11) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000300)=0xffffffffffffff76) 15:11:27 executing program 5: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:11:27 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:11:27 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x3, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000080)={0x1d, 0x1}) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@migrate={0xc8, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev}}, [@migrate={0x5c, 0x11, [{@in=@multicast2, @in=@loopback}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in6=@mcast1}}]}, 0xc8}}, 0x0) 15:11:27 executing program 0: request_key(0x0, &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000740)='threaded\x00', 0xfffffffffffffffd) r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x750, {0x2, 0x0, @dev={0xac, 0xb, 0x7}}, {0x2, 0x4e1e, @loopback}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x1}) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='map_files\x00\xf9\xc9\f\xf8\xddw\xd9\xda\x87\xc6\xa7\xce\x9b\x90\xd9\xb6\xe1=\x19u\xac\xc0Y\xb6\xba\x12\xb7g0ZN\xc09\x13\xac)@\xb7K\x8d\xfb\xf9\xb5\r\xd6b\x0e\x85\x92;\xca\xbc\xc5\xb4\xdd\x82_\xaa\x9a\x12^') mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x0, 0xb94, &(0x7f0000000400)="df7aa1f200ee4eff30782b30074da4b88754d4e1a5751718c41e8764cc36504e77f55a6f65636ef8537197691ec4effc557b875f672a761166b7b10741a8953dd9c9a8de03be39cd35ebab519e39a75ea233580de75b559b30e4124db870aea6e7c1e31d6e609dbbec529f0b196a88a2a3caa6d5933b7104a7b978c1c429fdc3a3ee3a120e2d80a315de7348126750a5127aa0af06f846dec1475af8b3ddd902a583c118a96103b0cd68a7de5135ab52530486e679f0ee767aa889447d7cc146", &(0x7f0000000340)="7d9dff9789312d9ae167696aaf42e3c72b6674ec50efe111c241f87a94a045787004c002d9767897d33c9c0514302ea5521ece4206330c34024cf6f6815f628d90e02f00686760323f923f47cb0400f306415a2b6a95d3a54b51e2f722402f7d3040ef8d35fe56d68fa78e4f7aaca5", 0xc0, 0x6f}) ptrace(0xffffffffffffffff, 0x0) capset(&(0x7f00000006c0), 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f00000003c0), &(0x7f00000005c0)=0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='map_files\x00\xf9\xc9\f\xf8\xddw\xd9\xda\x87\xc6\xa7\xce\x9b\x90\xd9\xb6\xe1=\x19u\xac\xc0Y\xb6\xba\x12\xb7g0ZN\xc09\x13\xac)@\xb7K\x8d\xfb\xf9\xb5\r\xd6b\x0e\x85\x92;\xca\xbc\xc5\xb4\xdd\x82_\xaa\x9a\x12^') mkdirat(r2, &(0x7f00000000c0)='./file0\x00', 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000080)=0xffffff80) r3 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x800) ioctl$KDADDIO(r3, 0x4b34, 0x800) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) r4 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x800) ioctl$KDADDIO(r4, 0x4b34, 0x800) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000002e80)={{{@in=@initdev, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000200)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000002e80)={{{@in=@initdev, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000680)=0xfffffffffffffdd8) ioctl$EVIOCGVERSION(r3, 0x80044501, &(0x7f00000004c0)=""/67) sync() syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x80000, 0x0) ioctl$VIDIOC_G_CTRL(r5, 0xc008561b, &(0x7f0000000140)={0x7ce60266, 0x9}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/eev/btr\x8b\x86L\xbd\x00+@\x9a\x00', 0x40120, 0x0) 15:11:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = fcntl$dupfd(r4, 0x406, r0) getsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0x40405515, &(0x7f0000000280)={0x6, 0x0, 0x400, 0x24f, 'syz0\x00', 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$PIO_UNISCRNMAP(r9, 0x4b6a, &(0x7f0000000300)) r10 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r10, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r10, r10, &(0x7f00000001c0), 0x8080fffffffe) r11 = pkey_alloc(0x0, 0x1) pkey_free(r11) 15:11:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/4\x00') prctl$PR_CAPBSET_DROP(0x18, 0xe) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:11:27 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:11:27 executing program 5: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) [ 165.819358] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 970769) 15:11:27 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) [ 165.892374] FAT-fs (loop1): Filesystem has been set read-only [ 165.930681] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 970769) 15:11:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = fcntl$dupfd(r4, 0x406, r0) getsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0x40405515, &(0x7f0000000280)={0x6, 0x0, 0x400, 0x24f, 'syz0\x00', 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$PIO_UNISCRNMAP(r9, 0x4b6a, &(0x7f0000000300)) r10 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r10, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r10, r10, &(0x7f00000001c0), 0x8080fffffffe) r11 = pkey_alloc(0x0, 0x1) pkey_free(r11) 15:11:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = fcntl$dupfd(r4, 0x406, r0) getsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0x40405515, &(0x7f0000000280)={0x6, 0x0, 0x400, 0x24f, 'syz0\x00', 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$PIO_UNISCRNMAP(r9, 0x4b6a, &(0x7f0000000300)) r10 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r10, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r10, r10, &(0x7f00000001c0), 0x8080fffffffe) r11 = pkey_alloc(0x0, 0x1) pkey_free(r11) 15:11:27 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r5, @ANYBLOB="dcda0baf62285ed0443c"]) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r7 = socket(0x0, 0x400000400080803, 0x0) r8 = dup(r7) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000001700)=0xe8) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r9}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', r9}) r10 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r10, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r11 = socket(0x0, 0x400000400080803, 0x0) dup(r11) 15:11:27 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(0x0, 0x10008802, 0x0) 15:11:27 executing program 0: request_key(0x0, &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000740)='threaded\x00', 0xfffffffffffffffd) r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x750, {0x2, 0x0, @dev={0xac, 0xb, 0x7}}, {0x2, 0x4e1e, @loopback}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x1}) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='map_files\x00\xf9\xc9\f\xf8\xddw\xd9\xda\x87\xc6\xa7\xce\x9b\x90\xd9\xb6\xe1=\x19u\xac\xc0Y\xb6\xba\x12\xb7g0ZN\xc09\x13\xac)@\xb7K\x8d\xfb\xf9\xb5\r\xd6b\x0e\x85\x92;\xca\xbc\xc5\xb4\xdd\x82_\xaa\x9a\x12^') mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x0, 0xb94, &(0x7f0000000400)="df7aa1f200ee4eff30782b30074da4b88754d4e1a5751718c41e8764cc36504e77f55a6f65636ef8537197691ec4effc557b875f672a761166b7b10741a8953dd9c9a8de03be39cd35ebab519e39a75ea233580de75b559b30e4124db870aea6e7c1e31d6e609dbbec529f0b196a88a2a3caa6d5933b7104a7b978c1c429fdc3a3ee3a120e2d80a315de7348126750a5127aa0af06f846dec1475af8b3ddd902a583c118a96103b0cd68a7de5135ab52530486e679f0ee767aa889447d7cc146", &(0x7f0000000340)="7d9dff9789312d9ae167696aaf42e3c72b6674ec50efe111c241f87a94a045787004c002d9767897d33c9c0514302ea5521ece4206330c34024cf6f6815f628d90e02f00686760323f923f47cb0400f306415a2b6a95d3a54b51e2f722402f7d3040ef8d35fe56d68fa78e4f7aaca5", 0xc0, 0x6f}) ptrace(0xffffffffffffffff, 0x0) capset(&(0x7f00000006c0), 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f00000003c0), &(0x7f00000005c0)=0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='map_files\x00\xf9\xc9\f\xf8\xddw\xd9\xda\x87\xc6\xa7\xce\x9b\x90\xd9\xb6\xe1=\x19u\xac\xc0Y\xb6\xba\x12\xb7g0ZN\xc09\x13\xac)@\xb7K\x8d\xfb\xf9\xb5\r\xd6b\x0e\x85\x92;\xca\xbc\xc5\xb4\xdd\x82_\xaa\x9a\x12^') mkdirat(r2, &(0x7f00000000c0)='./file0\x00', 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000080)=0xffffff80) r3 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x800) ioctl$KDADDIO(r3, 0x4b34, 0x800) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) r4 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x800) ioctl$KDADDIO(r4, 0x4b34, 0x800) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000002e80)={{{@in=@initdev, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000200)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000002e80)={{{@in=@initdev, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000680)=0xfffffffffffffdd8) ioctl$EVIOCGVERSION(r3, 0x80044501, &(0x7f00000004c0)=""/67) sync() syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x80000, 0x0) ioctl$VIDIOC_G_CTRL(r5, 0xc008561b, &(0x7f0000000140)={0x7ce60266, 0x9}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/eev/btr\x8b\x86L\xbd\x00+@\x9a\x00', 0x40120, 0x0) [ 166.214482] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 970769) [ 166.239063] FAT-fs (loop3): Filesystem has been set read-only [ 166.286904] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 970769) [ 166.306918] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 970769) 15:11:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = fcntl$dupfd(r4, 0x406, r0) getsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0x40405515, &(0x7f0000000280)={0x6, 0x0, 0x400, 0x24f, 'syz0\x00', 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$PIO_UNISCRNMAP(r9, 0x4b6a, &(0x7f0000000300)) r10 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r10, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r10, r10, &(0x7f00000001c0), 0x8080fffffffe) r11 = pkey_alloc(0x0, 0x1) pkey_free(r11) [ 166.336052] FAT-fs (loop1): Filesystem has been set read-only 15:11:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = fcntl$dupfd(r4, 0x406, r0) getsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0x40405515, &(0x7f0000000280)={0x6, 0x0, 0x400, 0x24f, 'syz0\x00', 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$PIO_UNISCRNMAP(r9, 0x4b6a, &(0x7f0000000300)) r10 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r10, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r10, r10, &(0x7f00000001c0), 0x8080fffffffe) r11 = pkey_alloc(0x0, 0x1) pkey_free(r11) 15:11:27 executing program 0: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) [ 166.377598] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 970769) 15:11:27 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r5, @ANYBLOB="dcda0baf62285ed0443c"]) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r7 = socket(0x0, 0x400000400080803, 0x0) r8 = dup(r7) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000001700)=0xe8) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r9}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', r9}) r10 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r10, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) socket(0x0, 0x400000400080803, 0x0) [ 166.547066] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 970769) 15:11:27 executing program 0: setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ustat(0x0, &(0x7f0000000040)) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x24000ff9, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffcbe, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0xffffff22}], 0x1, 0x0, 0x385}, 0x100) write$binfmt_aout(r0, &(0x7f0000000940)=ANY=[], 0xffffffef) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000080), &(0x7f0000000100)=0x4) [ 166.588411] FAT-fs (loop3): Filesystem has been set read-only [ 166.623306] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 970769) [ 166.638959] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 970769) [ 166.702585] FAT-fs (loop1): Filesystem has been set read-only [ 166.722833] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 970769) 15:11:30 executing program 5: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:11:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = fcntl$dupfd(r4, 0x406, r0) getsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0x40405515, &(0x7f0000000280)={0x6, 0x0, 0x400, 0x24f, 'syz0\x00', 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$PIO_UNISCRNMAP(r9, 0x4b6a, &(0x7f0000000300)) r10 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r10, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r10, r10, &(0x7f00000001c0), 0x8080fffffffe) r11 = pkey_alloc(0x0, 0x1) pkey_free(r11) 15:11:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = fcntl$dupfd(r4, 0x406, r0) getsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0x40405515, &(0x7f0000000280)={0x6, 0x0, 0x400, 0x24f, 'syz0\x00', 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$PIO_UNISCRNMAP(r9, 0x4b6a, &(0x7f0000000300)) r10 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r10, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r10, r10, &(0x7f00000001c0), 0x8080fffffffe) r11 = pkey_alloc(0x0, 0x1) pkey_free(r11) 15:11:30 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r5, @ANYBLOB="dcda0baf62285ed0443c"]) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r7 = socket(0x0, 0x400000400080803, 0x0) r8 = dup(r7) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000001700)=0xe8) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r9}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', r9}) r10 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r10, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:11:30 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(0x0, 0x10008802, 0x0) 15:11:30 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x5) bind$x25(r0, &(0x7f0000000180)={0x9, @null=' \x00'}, 0x12) open(&(0x7f0000000100)='./bus\x00', 0x0, 0x2) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300)='nbd\x00') sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="24072dbd7000fbdbdf2508000000000000004f466048c05a898a0cfc3daaf449bdbff7f698c85f606eb449e604472ec9bccfbb89eed365bc5a14e730923661c03f590f718ac0781229a88486e9137e0bf69ebdaa85169b52140b731cb1bacba6b697bb291157fcc3"], 0x3}, 0x1, 0x0, 0x0, 0x80}, 0xc000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) mkdir(&(0x7f00000000c0)='./file0\x00', 0xc) socket$inet(0x10, 0x3, 0xc) [ 168.998450] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 970769) [ 169.016871] FAT-fs (loop3): Filesystem has been set read-only [ 169.024777] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 970769) [ 169.061665] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 970769) [ 169.073051] FAT-fs (loop1): Filesystem has been set read-only 15:11:30 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x5) bind$x25(r0, &(0x7f0000000180)={0x9, @null=' \x00'}, 0x12) open(&(0x7f0000000100)='./bus\x00', 0x0, 0x2) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300)='nbd\x00') sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="24072dbd7000fbdbdf2508000000000000004f466048c05a898a0cfc3daaf449bdbff7f698c85f606eb449e604472ec9bccfbb89eed365bc5a14e730923661c03f590f718ac0781229a88486e9137e0bf69ebdaa85169b52140b731cb1bacba6b697bb291157fcc3"], 0x3}, 0x1, 0x0, 0x0, 0x80}, 0xc000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) mkdir(&(0x7f00000000c0)='./file0\x00', 0xc) socket$inet(0x10, 0x3, 0xc) [ 169.114748] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 970769) 15:11:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = fcntl$dupfd(r4, 0x406, r0) getsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0x40405515, &(0x7f0000000280)={0x6, 0x0, 0x400, 0x24f, 'syz0\x00', 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$PIO_UNISCRNMAP(r9, 0x4b6a, &(0x7f0000000300)) r10 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r10, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r10, r10, &(0x7f00000001c0), 0x8080fffffffe) pkey_alloc(0x0, 0x1) 15:11:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = fcntl$dupfd(r4, 0x406, r0) getsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0x40405515, &(0x7f0000000280)={0x6, 0x0, 0x400, 0x24f, 'syz0\x00', 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$PIO_UNISCRNMAP(r9, 0x4b6a, &(0x7f0000000300)) r10 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r10, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r10, r10, &(0x7f00000001c0), 0x8080fffffffe) pkey_alloc(0x0, 0x1) 15:11:30 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r5, @ANYBLOB="dcda0baf62285ed0443c"]) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r7 = socket(0x0, 0x400000400080803, 0x0) r8 = dup(r7) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000001700)=0xe8) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r9}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', r9}) socket$inet_udp(0x2, 0x2, 0x0) 15:11:30 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x5) bind$x25(r0, &(0x7f0000000180)={0x9, @null=' \x00'}, 0x12) open(&(0x7f0000000100)='./bus\x00', 0x0, 0x2) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300)='nbd\x00') sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="24072dbd7000fbdbdf2508000000000000004f466048c05a898a0cfc3daaf449bdbff7f698c85f606eb449e604472ec9bccfbb89eed365bc5a14e730923661c03f590f718ac0781229a88486e9137e0bf69ebdaa85169b52140b731cb1bacba6b697bb291157fcc3"], 0x3}, 0x1, 0x0, 0x0, 0x80}, 0xc000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) mkdir(&(0x7f00000000c0)='./file0\x00', 0xc) socket$inet(0x10, 0x3, 0xc) [ 169.475397] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 970769) [ 169.491603] FAT-fs (loop1): Filesystem has been set read-only [ 169.505436] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 970769) [ 169.576833] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 970769) 15:11:31 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r5, @ANYBLOB="dcda0baf62285ed0443c"]) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r7 = socket(0x0, 0x400000400080803, 0x0) r8 = dup(r7) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000001700)=0xe8) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r9}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', r9}) r10 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r10, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) [ 169.639587] FAT-fs (loop3): Filesystem has been set read-only [ 169.666495] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 970769) 15:11:33 executing program 5: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:11:33 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = fcntl$dupfd(r4, 0x406, r0) getsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0x40405515, &(0x7f0000000280)={0x6, 0x0, 0x400, 0x24f, 'syz0\x00', 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$PIO_UNISCRNMAP(r9, 0x4b6a, &(0x7f0000000300)) r10 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r10, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r10, r10, &(0x7f00000001c0), 0x8080fffffffe) 15:11:33 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(0x0, 0x10008802, 0x0) 15:11:33 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = fcntl$dupfd(r4, 0x406, r0) getsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0x40405515, &(0x7f0000000280)={0x6, 0x0, 0x400, 0x24f, 'syz0\x00', 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$PIO_UNISCRNMAP(r9, 0x4b6a, &(0x7f0000000300)) r10 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r10, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r10, r10, &(0x7f00000001c0), 0x8080fffffffe) 15:11:33 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r5, @ANYBLOB="dcda0baf62285ed0443c"]) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r7 = socket(0x0, 0x400000400080803, 0x0) r8 = dup(r7) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000001700)=0xe8) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r9}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', r9}) socket$inet_udp(0x2, 0x2, 0x0) 15:11:33 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x5) bind$x25(r0, &(0x7f0000000180)={0x9, @null=' \x00'}, 0x12) open(&(0x7f0000000100)='./bus\x00', 0x0, 0x2) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300)='nbd\x00') sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="24072dbd7000fbdbdf2508000000000000004f466048c05a898a0cfc3daaf449bdbff7f698c85f606eb449e604472ec9bccfbb89eed365bc5a14e730923661c03f590f718ac0781229a88486e9137e0bf69ebdaa85169b52140b731cb1bacba6b697bb291157fcc3"], 0x3}, 0x1, 0x0, 0x0, 0x80}, 0xc000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) mkdir(&(0x7f00000000c0)='./file0\x00', 0xc) socket$inet(0x10, 0x3, 0xc) [ 172.058829] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 970769) [ 172.083637] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 970769) 15:11:33 executing program 0: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) [ 172.169316] FAT-fs (loop1): Filesystem has been set read-only [ 172.179453] FAT-fs (loop3): Filesystem has been set read-only [ 172.188559] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 970769) [ 172.197500] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 970769) 15:11:33 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = fcntl$dupfd(r4, 0x406, r0) getsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0x40405515, &(0x7f0000000280)={0x6, 0x0, 0x400, 0x24f, 'syz0\x00', 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$PIO_UNISCRNMAP(r9, 0x4b6a, &(0x7f0000000300)) r10 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r10, &(0x7f0000000100)=ANY=[], 0x11d) sendfile(r10, r10, &(0x7f00000001c0), 0x8080fffffffe) 15:11:33 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = fcntl$dupfd(r4, 0x406, r0) getsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0x40405515, &(0x7f0000000280)={0x6, 0x0, 0x400, 0x24f, 'syz0\x00', 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$PIO_UNISCRNMAP(r9, 0x4b6a, &(0x7f0000000300)) r10 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r10, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) 15:11:33 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r5, @ANYBLOB="dcda0baf62285ed0443c"]) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r7 = socket(0x0, 0x400000400080803, 0x0) r8 = dup(r7) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000001700)=0xe8) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r9}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', r9}) socket$inet_udp(0x2, 0x2, 0x0) 15:11:33 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = fcntl$dupfd(r4, 0x406, r0) getsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0x40405515, &(0x7f0000000280)={0x6, 0x0, 0x400, 0x24f, 'syz0\x00', 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$PIO_UNISCRNMAP(r9, 0x4b6a, &(0x7f0000000300)) open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) 15:11:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = fcntl$dupfd(r4, 0x406, r0) getsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0x40405515, &(0x7f0000000280)={0x6, 0x0, 0x400, 0x24f, 'syz0\x00', 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$PIO_UNISCRNMAP(r9, 0x4b6a, &(0x7f0000000300)) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) 15:11:36 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 15:11:36 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r5, @ANYBLOB="dcda0baf62285ed0443c"]) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r7 = socket(0x0, 0x400000400080803, 0x0) r8 = dup(r7) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000001700)=0xe8) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r9}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', r9}) 15:11:36 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = fcntl$dupfd(r4, 0x406, r0) getsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0x40405515, &(0x7f0000000280)={0x6, 0x0, 0x400, 0x24f, 'syz0\x00', 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$PIO_UNISCRNMAP(r9, 0x4b6a, &(0x7f0000000300)) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) 15:11:36 executing program 5: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r1, 0x0) tkill(0x0, 0x1002000000016) 15:11:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = fcntl$dupfd(r4, 0x406, r0) getsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0x40405515, &(0x7f0000000280)={0x6, 0x0, 0x400, 0x24f, 'syz0\x00', 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$PIO_UNISCRNMAP(r9, 0x4b6a, &(0x7f0000000300)) r10 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r10, &(0x7f0000000100)=ANY=[], 0x11d) sendfile(r10, r10, &(0x7f00000001c0), 0x8080fffffffe) [ 175.060824] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 970769) 15:11:36 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = fcntl$dupfd(r4, 0x406, r0) getsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0x40405515, &(0x7f0000000280)={0x6, 0x0, 0x400, 0x24f, 'syz0\x00', 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$PIO_UNISCRNMAP(r9, 0x4b6a, &(0x7f0000000300)) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) [ 175.107458] FAT-fs (loop1): Filesystem has been set read-only [ 175.127921] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 970769) 15:11:36 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6991fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571fe000000000000006af8dd1ce4f565d76454f9e2b3da964998113975a6d38f84c1dec32917503563a00c11ed7c0162b399f49dd26ea0d25a5cc147bb951dd508a19d36c33a356294ffcfbb0c14029c5f0a0bd23c54a390e7d08443aa63ca430744bece0b9208e54ebb53ff91ac088c1e704317aa5f92fc5c349e73458aea58d5d82844828593281761b5c375e9e2e95820a313bcb8449a953d17c3a4ec", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) keyctl$update(0x2, 0x0, &(0x7f0000000000)="c976484ffdd8e5a6b247d23652585edbee9a74383bd55eacb29e6bc8f10d05601af29625a566e0305fbd6391ecf1a490834e853747555db8591543ad4ea90f98392923c9d539b08ab103b2b52870144081d5ed79a71f0952f46f73f1dff2e9e23f1f0cd3d413c98aff62efa001e6b54ccd4d9978f422ada3ddd21a7ab913a6be5e8ec4998b9a5beb1148e30f5529c2733c1b119cd2613d80a553de5182", 0x9d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x8) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2, 0x0) r2 = getpid() fcntl$lock(r1, 0x6, &(0x7f0000000140)={0x0, 0x4, 0x7, 0x7, r2}) 15:11:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = fcntl$dupfd(r4, 0x406, r0) getsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0x40405515, &(0x7f0000000280)={0x6, 0x0, 0x400, 0x24f, 'syz0\x00', 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$PIO_UNISCRNMAP(r9, 0x4b6a, &(0x7f0000000300)) r10 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r10, &(0x7f0000000100)=ANY=[], 0x11d) sendfile(r10, r10, &(0x7f00000001c0), 0x8080fffffffe) 15:11:36 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r5, @ANYBLOB="dcda0baf62285ed0443c"]) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r7 = socket(0x0, 0x400000400080803, 0x0) r8 = dup(r7) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000001700)=0xe8) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r9}) 15:11:36 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = fcntl$dupfd(r4, 0x406, r0) getsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0x40405515, &(0x7f0000000280)={0x6, 0x0, 0x400, 0x24f, 'syz0\x00', 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) [ 175.487080] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 970769) [ 175.517583] FAT-fs (loop1): Filesystem has been set read-only 15:11:36 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = fcntl$dupfd(r4, 0x406, r0) getsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0x40405515, &(0x7f0000000280)={0x6, 0x0, 0x400, 0x24f, 'syz0\x00', 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r8) open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) [ 175.538214] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 970769) 15:11:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = fcntl$dupfd(r4, 0x406, r0) getsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0x40405515, &(0x7f0000000280)={0x6, 0x0, 0x400, 0x24f, 'syz0\x00', 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$PIO_UNISCRNMAP(r9, 0x4b6a, &(0x7f0000000300)) r10 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r10, r10, &(0x7f00000001c0), 0x8080fffffffe) 15:11:37 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 15:11:37 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = fcntl$dupfd(r4, 0x406, r0) getsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0x40405515, &(0x7f0000000280)={0x6, 0x0, 0x400, 0x24f, 'syz0\x00', 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) 15:11:37 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r5, @ANYBLOB="dcda0baf62285ed0443c"]) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r7 = socket(0x0, 0x400000400080803, 0x0) r8 = dup(r7) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000001700)=0xe8) 15:11:37 executing program 5: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r1, 0x0) tkill(0x0, 0x1002000000016) 15:11:37 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = fcntl$dupfd(r4, 0x406, r0) getsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0x40405515, &(0x7f0000000280)={0x6, 0x0, 0x400, 0x24f, 'syz0\x00', 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$PIO_UNISCRNMAP(r9, 0x4b6a, &(0x7f0000000300)) r10 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r10, r10, &(0x7f00000001c0), 0x8080fffffffe) 15:11:37 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = fcntl$dupfd(r4, 0x406, r0) getsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0x40405515, &(0x7f0000000280)={0x6, 0x0, 0x400, 0x24f, 'syz0\x00', 0x2}) open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) 15:11:39 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = fcntl$dupfd(r4, 0x406, r0) getsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) 15:11:39 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = fcntl$dupfd(r4, 0x406, r0) getsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0x40405515, &(0x7f0000000280)={0x6, 0x0, 0x400, 0x24f, 'syz0\x00', 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$PIO_UNISCRNMAP(r9, 0x4b6a, &(0x7f0000000300)) r10 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r10, r10, &(0x7f00000001c0), 0x8080fffffffe) 15:11:39 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r5, @ANYBLOB="dcda0baf62285ed0443c"]) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r7 = socket(0x0, 0x400000400080803, 0x0) dup(r7) 15:11:39 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 15:11:39 executing program 5: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r1, 0x0) tkill(0x0, 0x1002000000016) 15:11:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000180)={0x0, 0x9}) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000040)='lotrusted\x1a\x00', 0x0) r4 = dup2(0xffffffffffffffff, r3) bpf$BPF_MAP_FREEZE(0x16, 0x0, 0x0) ioctl$VIDIOC_G_INPUT(0xffffffffffffffff, 0x80045626, 0x0) r5 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x6, 0x111200) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r5, 0x0, &(0x7f0000000300)=""/102, 0x3a4f1d44996e4f91}, 0x20) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x3, 0x1, 0x0, 0x2, 0x5, 0x6, 0x1, 0x9, 0x100, 0x80000001, 0x9, 0x1, 0x4, 0x6, 0x1, 0x4}}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$P9_RWALK(r7, &(0x7f00000004c0)={0x30, 0x6f, 0x2, {0x3, [{0xe, 0x4, 0x7}, {0x1, 0x1, 0x1}, {0x80, 0x4, 0x8}]}}, 0x30) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/avc/hash_stats\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) sched_getparam(0x0, &(0x7f0000000280)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)) r10 = syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x591de27c, 0x42) ioctl$USBDEVFS_RESETEP(r10, 0x80045503, &(0x7f0000000240)={0xe, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000cfc000/0x18000)=nil, 0x0, 0xfffffffffffffefd, 0x1, &(0x7f0000000180), 0x10000000000000a2) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000040)={0x1, 0x0, @pic={0x2, 0x3, 0x8, 0x3, 0x4f, 0x7, 0x3f, 0x6, 0x0, 0x0, 0x6, 0x1f, 0x7, 0x6, 0x3, 0x1}}) bind$netrom(r0, &(0x7f0000000440)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/net/pfkey\x00', 0xdfc64685766fc2df, 0x0) 15:11:39 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = fcntl$dupfd(r4, 0x406, r0) getsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r6) open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) 15:11:39 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = fcntl$dupfd(r4, 0x406, r0) getsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0x40405515, &(0x7f0000000280)={0x6, 0x0, 0x400, 0x24f, 'syz0\x00', 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$PIO_UNISCRNMAP(r9, 0x4b6a, &(0x7f0000000300)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) 15:11:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = fcntl$dupfd(r4, 0x406, r0) getsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0x40405515, &(0x7f0000000280)={0x6, 0x0, 0x400, 0x24f, 'syz0\x00', 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$PIO_UNISCRNMAP(r9, 0x4b6a, &(0x7f0000000300)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) 15:11:40 executing program 0: syz_mount_image$reiserfs(&(0x7f00000000c0)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10010000000035) capset(&(0x7f0000000000)={0x20080522, r1}, &(0x7f0000000040)={0x9b, 0xb45f, 0x4, 0x9, 0x8, 0x4}) r2 = dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x10003) ioctl$UI_DEV_CREATE(r2, 0x5501) 15:11:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = fcntl$dupfd(r4, 0x406, r0) getsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) 15:11:40 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r5, @ANYBLOB="dcda0baf62285ed0443c"]) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) socket(0x0, 0x400000400080803, 0x0) 15:11:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = fcntl$dupfd(r4, 0x406, r0) getsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0x40405515, &(0x7f0000000280)={0x6, 0x0, 0x400, 0x24f, 'syz0\x00', 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$PIO_UNISCRNMAP(r9, 0x4b6a, &(0x7f0000000300)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) 15:11:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = fcntl$dupfd(r4, 0x406, r0) getsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000200)=0x4) open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) 15:11:40 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$selinux_load(r1, &(0x7f0000000000)={0xf97cff8c, 0x8, 'SE Linux', "dfc6ee1575fa5aea7816520c739a18ffdd52222bcc91ba081e851482eb5807ad6b82ed92fd6f7172bc5f58090e465102a8febdd766f73dd74993d79f696a5b0d84f69a73c89e7b278c1e9b87ad20005e434738359455692380af0a507c70bf0cc32e89111642752d8ed9f11c27af12dabb1985a712c75112fac75fc012156a509797dc6723553c1d6de597d5081ec3e0ea376e9c0063c8a617334cc6e6d485eb6d1239898ab3c80d5f4a00ee433f002487d2ce789c6193fbbd1e6617ca8972c36f09b7c96cc8558146f473f6"}, 0xdc) r2 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x10000) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000180)='trusted.overlay.redirect\x00', &(0x7f00000001c0)='./file0\x00', 0x8, 0x2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) read(r4, &(0x7f0000000380)=""/32, 0x20) ioctl(r3, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") ioctl$SIOCRSGCAUSE(r1, 0x89e0, &(0x7f0000000340)) socket$inet(0x10, 0x3, 0xc) r5 = creat(&(0x7f0000000200)='./file0\x00', 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_S_PARM(r7, 0xc0cc5616, &(0x7f00000003c0)={0x3, @capture={0x1000, 0x1, {0x1, 0x7}, 0x3, 0x9}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r9, 0xd5bf98d0fc1ca026, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x2}}}, 0xffffffffffffff3c}}, 0xe2776b9886ef771a) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x38af81e7d4ca5be6}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r9, 0x200, 0x70bd2d, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x100}, 0x2) 15:11:40 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r5, @ANYBLOB="dcda0baf62285ed0443c"]) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:11:40 executing program 5: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(0xffffffffffffffff, r1, 0x0) tkill(r0, 0x1002000000016) 15:11:40 executing program 0: syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) 15:11:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = fcntl$dupfd(r4, 0x406, r0) getsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0x40405515, &(0x7f0000000280)={0x6, 0x0, 0x400, 0x24f, 'syz0\x00', 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r10, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r10, r10, &(0x7f00000001c0), 0x8080fffffffe) 15:11:40 executing program 4 (fault-call:5 fault-nth:0): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:11:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fcntl$dupfd(r4, 0x406, r0) open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) [ 179.347500] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing 15:11:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) [ 179.417122] FAULT_INJECTION: forcing a failure. [ 179.417122] name failslab, interval 1, probability 0, space 0, times 1 [ 179.472689] CPU: 1 PID: 8892 Comm: syz-executor.4 Not tainted 4.14.147 #0 [ 179.479670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 179.489031] Call Trace: [ 179.491642] dump_stack+0x138/0x197 [ 179.495272] should_fail.cold+0x10f/0x159 [ 179.499413] should_failslab+0xdb/0x130 [ 179.503393] kmem_cache_alloc+0x2d7/0x780 [ 179.507599] ? lock_downgrade+0x740/0x740 [ 179.511735] getname_flags+0xcb/0x580 [ 179.515522] getname+0x1a/0x20 [ 179.518696] do_sys_open+0x1e7/0x430 [ 179.522398] ? filp_open+0x70/0x70 [ 179.525929] SyS_open+0x2d/0x40 [ 179.529194] ? do_sys_open+0x430/0x430 [ 179.533513] do_syscall_64+0x1e8/0x640 [ 179.537411] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 179.542244] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 179.547419] RIP: 0033:0x459a59 [ 179.550589] RSP: 002b:00007f2809197c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 179.558282] RAX: ffffffffffffffda RBX: 00007f2809197c90 RCX: 0000000000459a59 [ 179.565538] RDX: 0000000000000000 RSI: 0000000010008802 RDI: 0000000020000100 [ 179.572815] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 179.580953] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f28091986d4 [ 179.588208] R13: 00000000004f9a5f R14: 00000000004db5c8 R15: 0000000000000004 15:11:41 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r5, @ANYBLOB="dcda0baf62285ed0443c"]) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) [ 179.676404] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing 15:11:41 executing program 0: add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000240)={0x9, 0x0, [{0x867, 0x1, 0x0, 0x0, @irqchip={0x1000, 0x1}}, {0xf1, 0x1, 0x0, 0x0, @sint={0x80, 0x100}}, {0x7fff, 0xcb6c8bde5d18138, 0x0, 0x0, @sint={0x8, 0x4}}, {0x1, 0x0, 0x0, 0x0, @adapter={0x1, 0x2, 0x4, 0x8, 0x9}}, {0xa3b, 0x0, 0x0, 0x0, @sint={0x2, 0x21c}}, {0x4, 0x81f7eeba3e06318e, 0x0, 0x0, @sint={0x9, 0x2}}, {0x8, 0x2, 0x0, 0x0, @sint={0x5, 0x2}}, {0x4, 0x1, 0x0, 0x0, @irqchip={0x4, 0x1}}, {0x0, 0x2, 0x0, 0x0, @irqchip={0x75ea, 0x2d}}]}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x9, 0x7f, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff0001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x890, 0xf8b3}, 0x0, 0x0, 0x8, 0x0, 0x1fffffffc00002}, 0x0, 0x0, 0xffffffffffffffff, 0x5c05f328587f2f59) r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000000800)="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", 0x600) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r4, 0xab00, 0xffffffffffffffff) clone(0x140000, &(0x7f0000000080)="507acb67ec2d3a4606d89043a036176e88803e1af0b33408ddb591e4b67f88ea2cd719a83f09eb1e8ae04b1be2d6bc7f731827de5ede43fe495f2e1f11d82e880d3bb1bbfa20fdf1338c98380bed2827bafded9c442e443b4393bd3af96b6cea6112826c5d5bb6de4172dc53b1c9ad78ccd000cd5a1c4a3578caeae6e4e4439525a16be11adec1cefe850805ce46f26c95f1231ed362b5bbd85f89a03ea16e095a6d578c71ef5c0de341d249a7980129b39d34", &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000001c0)="4dc12dbe056cf0911c870c3ef833f0d3c55fa2d74437e9e4318030d26d064c1d21b493bff1155a5f8fb8d7e39ae7c6e88cccbd06893ffc75270c886c95957a9aac6ba958c925555c7ad14b24c94dd45f6307299a8acf05a4") sendfile(r0, r3, 0x0, 0x10000) 15:11:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) 15:11:41 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x5) bind$x25(r0, &(0x7f0000000180)={0x9, @null=' \x00'}, 0x12) open(&(0x7f0000000100)='./bus\x00', 0x0, 0x2) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) bind$netrom(r6, &(0x7f0000000540)={{0x3, @null, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300)='nbd\x00') sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="24072dbd7000fbdbdf2508000000000000004f466048c05a898a0cfc3daaf449bdbff7f698c85f606eb449e604472ec9bccfbb89eed365bc5a14e730923661c03f590f718ac0781229a88486e9137e0bf69ebdaa85169b52140b731cb1bacba6b697bb291157fcc393644c348b6641f71ec9d92f076e5da2fc2f0ecc6c7a693acacc3a668a1a7af44a7b748a2c8dfab22e11c08e774bcf3ecd63235d5ef58d1428f42454cde7d93e9b54efe3cd87436b9ff76f358c9afa10a106c52f23ad99950abfe3e932bd4ada2979b7eae7d0f8c6d9c9"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0xc000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) socket$inet(0x10, 0x3, 0xc) 15:11:41 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r5, @ANYBLOB="dcda0baf62285ed0443c"]) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) [ 179.896954] audit: type=1800 audit(1570461101.244:75): pid=8917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=16787 res=0 15:11:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) 15:11:41 executing program 5: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(0xffffffffffffffff, r1, 0x0) tkill(r0, 0x1002000000016) [ 179.996630] audit: type=1804 audit(1570461101.244:76): pid=8917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir743184286/syzkaller.0oMX33/59/file0" dev="sda1" ino=16787 res=1 15:11:41 executing program 0: r0 = creat(&(0x7f0000000540)='./file0\x00', 0x80) r1 = creat(&(0x7f0000000540)='./file0\x00', 0x0) write$P9_RAUTH(r1, &(0x7f0000000100)={0x14}, 0x13) fallocate(r1, 0x11, 0x0, 0x7ff800000) fallocate(r0, 0x20, 0x0, 0x7ff800000) fallocate(r0, 0x8, 0x0, 0x8000) 15:11:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = fcntl$dupfd(r4, 0x406, r0) getsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0x40405515, &(0x7f0000000280)={0x6, 0x0, 0x400, 0x24f, 'syz0\x00', 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r10, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r10, r10, &(0x7f00000001c0), 0x8080fffffffe) 15:11:41 executing program 4 (fault-call:5 fault-nth:1): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) [ 180.317370] FAULT_INJECTION: forcing a failure. [ 180.317370] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 180.329652] CPU: 1 PID: 8956 Comm: syz-executor.4 Not tainted 4.14.147 #0 [ 180.336590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 180.346044] Call Trace: [ 180.348648] dump_stack+0x138/0x197 [ 180.352484] should_fail.cold+0x10f/0x159 [ 180.356652] __alloc_pages_nodemask+0x1d6/0x7a0 [ 180.361325] ? fs_reclaim_acquire+0x20/0x20 [ 180.365637] ? __alloc_pages_slowpath+0x2930/0x2930 [ 180.370647] cache_grow_begin+0x80/0x400 [ 180.374695] kmem_cache_alloc+0x6a6/0x780 [ 180.378828] ? lock_downgrade+0x740/0x740 [ 180.383003] getname_flags+0xcb/0x580 [ 180.386799] getname+0x1a/0x20 [ 180.389974] do_sys_open+0x1e7/0x430 [ 180.393673] ? filp_open+0x70/0x70 [ 180.397198] SyS_open+0x2d/0x40 [ 180.400458] ? do_sys_open+0x430/0x430 [ 180.404328] do_syscall_64+0x1e8/0x640 [ 180.408197] ? trace_hardirqs_off_thunk+0x1a/0x1c 15:11:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) [ 180.413043] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 180.418218] RIP: 0033:0x459a59 [ 180.421393] RSP: 002b:00007f2809197c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 180.429096] RAX: ffffffffffffffda RBX: 00007f2809197c90 RCX: 0000000000459a59 [ 180.436347] RDX: 0000000000000000 RSI: 0000000010008802 RDI: 0000000020000100 [ 180.443696] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 180.450951] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f28091986d4 [ 180.458202] R13: 00000000004f9a5f R14: 00000000004db5c8 R15: 0000000000000004 15:11:41 executing program 4 (fault-call:5 fault-nth:2): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:11:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = fcntl$dupfd(r4, 0x406, r0) getsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0x40405515, &(0x7f0000000280)={0x6, 0x0, 0x400, 0x24f, 'syz0\x00', 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r8) r9 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r9, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r9, r9, &(0x7f00000001c0), 0x8080fffffffe) 15:11:41 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r5, @ANYBLOB="dcda0baf62285ed0443c"]) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) [ 180.528305] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 970769) [ 180.536892] FAT-fs (loop1): Filesystem has been set read-only [ 180.545688] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 970769) 15:11:42 executing program 0: syz_mount_image$ntfs(&(0x7f0000000000)='*\xd2W\x9c\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4a, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='nls=iso8859-4,case_sensitive']) 15:11:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) [ 180.656530] FAULT_INJECTION: forcing a failure. [ 180.656530] name failslab, interval 1, probability 0, space 0, times 0 [ 180.724325] CPU: 1 PID: 8974 Comm: syz-executor.4 Not tainted 4.14.147 #0 [ 180.731306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 180.740668] Call Trace: [ 180.743437] dump_stack+0x138/0x197 [ 180.747122] should_fail.cold+0x10f/0x159 [ 180.751260] should_failslab+0xdb/0x130 [ 180.755220] kmem_cache_alloc+0x2d7/0x780 [ 180.759354] ? save_stack+0xa9/0xd0 [ 180.762986] get_empty_filp+0x8c/0x3f0 [ 180.766955] path_openat+0x8f/0x3f70 [ 180.770653] ? trace_hardirqs_on+0x10/0x10 [ 180.774875] ? check_preemption_disabled+0x3c/0x250 [ 180.779880] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 180.784531] ? find_held_lock+0x35/0x130 [ 180.788575] ? save_trace+0x290/0x290 [ 180.792374] ? __alloc_fd+0x1d4/0x4a0 [ 180.796157] do_filp_open+0x18e/0x250 [ 180.799943] ? may_open_dev+0xe0/0xe0 [ 180.803735] ? lock_downgrade+0x740/0x740 [ 180.807890] ? _raw_spin_unlock+0x2d/0x50 [ 180.812035] ? __alloc_fd+0x1d4/0x4a0 [ 180.815850] do_sys_open+0x2c5/0x430 [ 180.819555] ? filp_open+0x70/0x70 [ 180.823087] SyS_open+0x2d/0x40 [ 180.826346] ? do_sys_open+0x430/0x430 [ 180.830216] do_syscall_64+0x1e8/0x640 [ 180.834085] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 180.838913] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 180.844083] RIP: 0033:0x459a59 [ 180.848398] RSP: 002b:00007f2809197c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 180.856117] RAX: ffffffffffffffda RBX: 00007f2809197c90 RCX: 0000000000459a59 [ 180.863467] RDX: 0000000000000000 RSI: 0000000010008802 RDI: 0000000020000100 [ 180.870722] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 180.877984] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f28091986d4 [ 180.885334] R13: 00000000004f9a5f R14: 00000000004db5c8 R15: 0000000000000004 15:11:42 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 15:11:42 executing program 5: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(0xffffffffffffffff, r1, 0x0) tkill(r0, 0x1002000000016) 15:11:42 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000680), &(0x7f00000006c0)=0xc) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:11:42 executing program 0: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000300)=0x1c, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x7f, 0x40, 0x3, 0x8}, {0x1, 0x0, 0x8, 0x3e00000000000000}, {0x0, 0x0, 0x1f}, {0x80000001, 0x7ec3, 0x0, 0x3}, {0x1000, 0x6, 0x0, 0x9}, {0x100000000, 0x2}]}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00') sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x38, r5, 0x800, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x1000c880}, 0x4000008) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000280), &(0x7f0000000580)=0x4) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r6, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:11:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) 15:11:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) 15:11:42 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup(0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:11:42 executing program 4 (fault-call:5 fault-nth:3): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) [ 181.518156] FAULT_INJECTION: forcing a failure. [ 181.518156] name failslab, interval 1, probability 0, space 0, times 0 [ 181.549832] CPU: 1 PID: 9030 Comm: syz-executor.4 Not tainted 4.14.147 #0 [ 181.556863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 181.566225] Call Trace: [ 181.568826] dump_stack+0x138/0x197 [ 181.572475] should_fail.cold+0x10f/0x159 [ 181.576639] should_failslab+0xdb/0x130 [ 181.580631] kmem_cache_alloc+0x2d7/0x780 [ 181.584790] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 181.590258] ? check_preemption_disabled+0x3c/0x250 [ 181.595286] selinux_file_alloc_security+0xb4/0x190 [ 181.600306] security_file_alloc+0x6d/0xa0 [ 181.604547] get_empty_filp+0x162/0x3f0 [ 181.608784] path_openat+0x8f/0x3f70 [ 181.612504] ? trace_hardirqs_on+0x10/0x10 [ 181.616739] ? check_preemption_disabled+0x3c/0x250 [ 181.621758] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 181.626425] ? find_held_lock+0x35/0x130 [ 181.630492] ? save_trace+0x290/0x290 [ 181.634300] ? __alloc_fd+0x1d4/0x4a0 [ 181.638363] do_filp_open+0x18e/0x250 [ 181.642161] ? may_open_dev+0xe0/0xe0 [ 181.645966] ? lock_downgrade+0x740/0x740 [ 181.650120] ? _raw_spin_unlock+0x2d/0x50 [ 181.654269] ? __alloc_fd+0x1d4/0x4a0 [ 181.658081] do_sys_open+0x2c5/0x430 [ 181.661796] ? filp_open+0x70/0x70 [ 181.665343] SyS_open+0x2d/0x40 [ 181.668624] ? do_sys_open+0x430/0x430 [ 181.672515] do_syscall_64+0x1e8/0x640 [ 181.676400] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 181.681267] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 181.686440] RIP: 0033:0x459a59 [ 181.689609] RSP: 002b:00007f2809197c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 181.697334] RAX: ffffffffffffffda RBX: 00007f2809197c90 RCX: 0000000000459a59 [ 181.704598] RDX: 0000000000000000 RSI: 0000000010008802 RDI: 0000000020000100 [ 181.711874] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 15:11:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) 15:11:43 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:11:43 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = fcntl$dupfd(r4, 0x406, r0) getsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0x40405515, &(0x7f0000000280)={0x6, 0x0, 0x400, 0x24f, 'syz0\x00', 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r8) r9 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r9, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r9, r9, &(0x7f00000001c0), 0x8080fffffffe) [ 181.719138] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f28091986d4 [ 181.726393] R13: 00000000004f9a5f R14: 00000000004db5c8 R15: 0000000000000004 15:11:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) 15:11:43 executing program 5: pipe(0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:11:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) 15:11:43 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:11:43 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup(0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:11:43 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:11:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) 15:11:43 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:11:43 executing program 4 (fault-call:5 fault-nth:4): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:11:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) [ 182.415464] FAULT_INJECTION: forcing a failure. [ 182.415464] name failslab, interval 1, probability 0, space 0, times 0 [ 182.426934] CPU: 0 PID: 9093 Comm: syz-executor.4 Not tainted 4.14.147 #0 [ 182.433858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 182.443291] Call Trace: [ 182.445874] dump_stack+0x138/0x197 [ 182.449491] should_fail.cold+0x10f/0x159 [ 182.453641] should_failslab+0xdb/0x130 [ 182.457601] kmem_cache_alloc+0x47/0x780 [ 182.461646] ? lock_downgrade+0x740/0x740 [ 182.465780] __sigqueue_alloc+0x1da/0x400 [ 182.469912] __send_signal+0x1a2/0x1280 [ 182.473877] send_signal+0x49/0xc0 [ 182.477400] do_send_sig_info+0x85/0x100 [ 182.481532] ? __lock_task_sighand+0x660/0x660 [ 182.486113] send_sigio_to_task+0x386/0x560 [ 182.490439] ? f_setown+0x1d0/0x1d0 [ 182.494050] ? trace_hardirqs_on+0x10/0x10 [ 182.498272] ? lock_acquire+0x16f/0x430 [ 182.502237] ? send_sigio+0xae/0x1e0 [ 182.506120] send_sigio+0x16a/0x1e0 [ 182.509746] kill_fasync+0x1cd/0x3d0 [ 182.513444] lease_break_callback+0x23/0x30 [ 182.517748] __break_lease+0x3af/0x1220 [ 182.521712] ? locks_lock_inode_wait+0x370/0x370 [ 182.526448] ? inode_has_perm.isra.0+0x1e0/0x1e0 [ 182.531187] ? lock_downgrade+0x6ec/0x740 [ 182.535325] ? security_file_open+0x89/0x190 [ 182.539729] do_dentry_open+0x6a5/0xeb0 [ 182.543698] vfs_open+0x105/0x220 [ 182.547133] path_openat+0x8bd/0x3f70 [ 182.551611] ? get_pid_task+0x98/0x140 [ 182.555489] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 182.560145] ? __alloc_fd+0x1d4/0x4a0 [ 182.563940] do_filp_open+0x18e/0x250 [ 182.567720] ? may_open_dev+0xe0/0xe0 [ 182.571519] ? _raw_spin_unlock+0x2d/0x50 [ 182.575650] ? __alloc_fd+0x1d4/0x4a0 [ 182.579450] do_sys_open+0x2c5/0x430 [ 182.583147] ? filp_open+0x70/0x70 [ 182.586674] SyS_open+0x2d/0x40 [ 182.589932] ? do_sys_open+0x430/0x430 [ 182.593817] do_syscall_64+0x1e8/0x640 [ 182.597685] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 182.602517] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 182.607693] RIP: 0033:0x459a59 15:11:44 executing program 4 (fault-call:5 fault-nth:5): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) [ 182.610863] RSP: 002b:00007f2809197c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 182.618552] RAX: ffffffffffffffda RBX: 00007f2809197c90 RCX: 0000000000459a59 [ 182.625822] RDX: 0000000000000000 RSI: 0000000010008802 RDI: 0000000020000100 [ 182.633078] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 182.640331] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f28091986d4 [ 182.648711] R13: 00000000004f9a5f R14: 00000000004db5c8 R15: 0000000000000004 15:11:44 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = fcntl$dupfd(r4, 0x406, r0) getsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0x40405515, &(0x7f0000000280)={0x6, 0x0, 0x400, 0x24f, 'syz0\x00', 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r8) r9 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r9, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r9, r9, &(0x7f00000001c0), 0x8080fffffffe) 15:11:44 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:11:44 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup(0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:11:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) [ 182.775948] FAULT_INJECTION: forcing a failure. [ 182.775948] name failslab, interval 1, probability 0, space 0, times 0 [ 182.787201] CPU: 1 PID: 9107 Comm: syz-executor.4 Not tainted 4.14.147 #0 [ 182.794116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 182.803460] Call Trace: [ 182.806144] dump_stack+0x138/0x197 [ 182.810061] should_fail.cold+0x10f/0x159 [ 182.814320] should_failslab+0xdb/0x130 [ 182.818647] kmem_cache_alloc+0x47/0x780 [ 182.822705] ? lock_downgrade+0x740/0x740 [ 182.827007] __sigqueue_alloc+0x1da/0x400 [ 182.831265] __send_signal+0x1a2/0x1280 [ 182.835252] send_signal+0x49/0xc0 [ 182.838786] do_send_sig_info+0x85/0x100 [ 182.842920] ? __lock_task_sighand+0x660/0x660 [ 182.847489] send_sigio_to_task+0x386/0x560 [ 182.851812] ? f_setown+0x1d0/0x1d0 [ 182.855558] ? trace_hardirqs_on+0x10/0x10 [ 182.859908] ? lock_acquire+0x16f/0x430 [ 182.863864] ? send_sigio+0xae/0x1e0 [ 182.867590] send_sigio+0x16a/0x1e0 [ 182.871471] kill_fasync+0x1cd/0x3d0 [ 182.875578] lease_break_callback+0x23/0x30 [ 182.879895] __break_lease+0x3af/0x1220 [ 182.883868] ? locks_lock_inode_wait+0x370/0x370 [ 182.888702] ? inode_has_perm.isra.0+0x1e0/0x1e0 [ 182.893557] ? lock_downgrade+0x6ec/0x740 [ 182.897786] ? security_file_open+0x89/0x190 [ 182.902180] do_dentry_open+0x6a5/0xeb0 [ 182.907017] vfs_open+0x105/0x220 [ 182.910630] path_openat+0x8bd/0x3f70 [ 182.914421] ? trace_hardirqs_on+0x10/0x10 [ 182.918914] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 182.923673] ? find_held_lock+0x35/0x130 [ 182.927814] ? __alloc_fd+0x1d4/0x4a0 [ 182.931600] do_filp_open+0x18e/0x250 [ 182.935502] ? may_open_dev+0xe0/0xe0 [ 182.939318] ? _raw_spin_unlock+0x2d/0x50 [ 182.943487] ? __alloc_fd+0x1d4/0x4a0 [ 182.947291] do_sys_open+0x2c5/0x430 [ 182.950993] ? filp_open+0x70/0x70 [ 182.954628] SyS_open+0x2d/0x40 [ 182.957902] ? do_sys_open+0x430/0x430 [ 182.961886] do_syscall_64+0x1e8/0x640 [ 182.965761] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 182.970621] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 182.975816] RIP: 0033:0x459a59 [ 182.979131] RSP: 002b:00007f2809197c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 182.987015] RAX: ffffffffffffffda RBX: 00007f2809197c90 RCX: 0000000000459a59 [ 182.994276] RDX: 0000000000000000 RSI: 0000000010008802 RDI: 0000000020000100 [ 183.001535] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 183.008804] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f28091986d4 [ 183.016074] R13: 00000000004f9a5f R14: 00000000004db5c8 R15: 0000000000000004 [ 183.055455] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 970769) [ 183.087822] FAT-fs (loop1): Filesystem has been set read-only 15:11:44 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:11:44 executing program 4 (fault-call:5 fault-nth:6): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) [ 183.100477] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 970769) 15:11:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) 15:11:44 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = fcntl$dupfd(r4, 0x406, r0) getsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0x40405515, &(0x7f0000000280)={0x6, 0x0, 0x400, 0x24f, 'syz0\x00', 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r8 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r8, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r8, r8, &(0x7f00000001c0), 0x8080fffffffe) 15:11:44 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:11:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) 15:11:44 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x8, 0x9}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000140)={r3, 0x33, "5fec620bd9da71a7ea4511aa2988a39ee454070b37680332e7ce697eaf489d8ae4050175e7e88471dae6c9a6173cb1706cb6d1"}, &(0x7f0000000180)=0x3b) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:11:44 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup(0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) [ 183.385928] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 970769) [ 183.411308] FAT-fs (loop1): Filesystem has been set read-only [ 183.417529] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 970769) 15:11:44 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = fcntl$dupfd(r4, 0x406, r0) getsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0x40405515, &(0x7f0000000280)={0x6, 0x0, 0x400, 0x24f, 'syz0\x00', 0x2}) r8 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r8, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r8, r8, &(0x7f00000001c0), 0x8080fffffffe) 15:11:44 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'ip6tnl0\x00', 0x2}) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) r1 = socket$unix(0x1, 0x8000000000000005, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@gid={'gid', 0x3d, r2}}]}) getresgid(&(0x7f0000000080)=0x0, &(0x7f0000000140), &(0x7f0000000180)) setregid(r2, r3) 15:11:44 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) 15:11:44 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) [ 183.665389] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 970769) [ 183.685053] FAT-fs (loop1): Filesystem has been set read-only [ 183.709603] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 970769) 15:11:45 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:11:45 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = fcntl$dupfd(r4, 0x406, r0) getsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r8, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r8, r8, &(0x7f00000001c0), 0x8080fffffffe) 15:11:45 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) 15:11:45 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video1\x00', 0x2, 0x0) fcntl$setlease(r1, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) lsetxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x978bb2b46792851a) fcntl$setsig(r0, 0xa, 0x41d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:11:45 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup(0xffffffffffffffff) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:11:45 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:11:45 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) [ 184.053922] audit: type=1804 audit(1570461105.404:77): pid=9208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir684005504/syzkaller.GjcBj4/63/file0" dev="sda1" ino=16808 res=1 15:11:45 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) [ 184.099747] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 970769) 15:11:45 executing program 3: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) [ 184.136669] FAT-fs (loop1): Filesystem has been set read-only [ 184.149648] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 970769) 15:11:45 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = fcntl$dupfd(r4, 0x406, r0) getsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r6) r7 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r7, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r7, r7, &(0x7f00000001c0), 0x8080fffffffe) 15:11:45 executing program 3: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) 15:11:45 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup(0xffffffffffffffff) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) [ 184.395658] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 970769) [ 184.422407] FAT-fs (loop1): Filesystem has been set read-only [ 184.428640] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 970769) 15:11:46 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, 0x0, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:11:46 executing program 3: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) 15:11:46 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:11:46 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x7fffffff}, &(0x7f0000000080)=0x8) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:11:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = fcntl$dupfd(r4, 0x406, r0) getsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r6 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r6, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r6, r6, &(0x7f00000001c0), 0x8080fffffffe) 15:11:46 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, 0x0, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:11:46 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup(0xffffffffffffffff) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:11:46 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) 15:11:46 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) 15:11:46 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, 0x0, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) [ 184.933231] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 970769) 15:11:46 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) 15:11:46 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000), &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) [ 185.001897] FAT-fs (loop1): Filesystem has been set read-only [ 185.025246] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 970769) 15:11:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = fcntl$dupfd(r4, 0x406, r0) getsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000200)=0x4) r6 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r6, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r6, r6, &(0x7f00000001c0), 0x8080fffffffe) 15:11:46 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) 15:11:46 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) [ 185.257832] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 970769) [ 185.300341] FAT-fs (loop1): Filesystem has been set read-only [ 185.308326] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 970769) 15:11:47 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:11:47 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:11:47 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) 15:11:47 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000200)=""/110, 0x6e, 0x1001, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e24}, 0x6e) fcntl$setlease(r0, 0x400, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000300)=0x101) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x4000, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000140)={[0x2, 0x4, 0x8001, 0xed2, 0x7, 0xffffffff, 0x6, 0x200000000002, 0x77d, 0x7, 0x4, 0x200, 0x400, 0x1, 0x9], 0x3000, 0xfe7bae32bac98038}) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) r4 = socket$caif_seqpacket(0x25, 0x5, 0x2) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r4, 0x111, 0x5, 0x0, 0x4) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000040)) 15:11:47 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fcntl$dupfd(r4, 0x406, r0) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) 15:11:47 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) [ 185.797013] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 970769) 15:11:47 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) [ 185.839586] FAT-fs (loop1): Filesystem has been set read-only [ 185.848540] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 970769) 15:11:47 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) [ 186.075934] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 970769) [ 186.084803] FAT-fs (loop1): Filesystem has been set read-only [ 186.090960] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 970769) 15:11:49 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000), &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:11:49 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x4000, 0x0) ioctl$KVM_NMI(r1, 0xae9a) write$UHID_DESTROY(r1, &(0x7f0000000080), 0xff79) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:11:49 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) 15:11:49 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:11:49 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:11:49 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r4, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r4, r4, &(0x7f00000001c0), 0x8080fffffffe) 15:11:49 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(0x0, 0x14107e, 0x0) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) [ 188.135335] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 970769) [ 188.159029] FAT-fs (loop1): Filesystem has been set read-only 15:11:49 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x1, &(0x7f0000000040)={0x202}, 0x0, 0x28b) syz_open_pts(0xffffffffffffffff, 0x800) rt_sigtimedwait(&(0x7f0000000140)={0x5}, 0x0, 0x0, 0x3c75013d) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x18040, 0x2) 15:11:49 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(0x0, 0x14107e, 0x0) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) [ 188.206853] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 970769) 15:11:49 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) 15:11:49 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(0x0, 0x14107e, 0x0) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) 15:11:49 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x10010000000035) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={[], 0x6a7, 0x80, 0x400, 0x400, 0x6, r3}) [ 188.470853] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 970769) [ 188.491424] FAT-fs (loop1): Filesystem has been set read-only [ 188.499305] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 970769) 15:11:52 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000), &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:11:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) 15:11:52 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000080), 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000040)={0x2b, 0x6, 0x0, {0x2, 0x5, 0x2, 0x0, '*&'}}, 0x2b) ioctl$VIDIOC_S_JPEGCOMP(0xffffffffffffffff, 0x408c563e, &(0x7f0000000140)={0x7, 0x9, 0x9, "11ce8142348fd045aefdde7854bd9fb787f6a3870e35f0ada57827850ca24bd5ab7789fd5d676f2101f27f0ebcc1a25015208ea298f2334ddcd26b00", 0x2b, "49fc87a0f87d4c1ff235c9a024495b07cd2c58fc42b8e8771974296a9139fdff7532ac0ccca04b1eac5ed652f9dfae778ec853d20a3b417002679f16", 0x10}) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x3) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:11:52 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:11:52 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:11:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) 15:11:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) [ 191.201786] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 970769) [ 191.236098] FAT-fs (loop1): Filesystem has been set read-only 15:11:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) 15:11:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r2, r2, &(0x7f00000001c0), 0x8080fffffffe) [ 191.265415] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 970769) 15:11:52 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x48280, 0x20) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x40) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:11:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) utime(0x0, &(0x7f0000000240)={0xfff7fffffffffffe}) 15:11:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) utime(0x0, &(0x7f0000000240)={0xfff7fffffffffffe}) [ 191.502873] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 970769) [ 191.527417] FAT-fs (loop1): Filesystem has been set read-only [ 191.537892] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 970769) 15:11:55 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:11:55 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0xffffffffffffffa3) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x8, 0x80) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) r2 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r3 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000fe9000/0x3000)=nil) shmat(r3, &(0x7f0000ff0000/0x1000)=nil, 0x1000) r4 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x2000) shmdt(r4) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:11:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) utime(0x0, &(0x7f0000000240)={0xfff7fffffffffffe}) 15:11:55 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:11:55 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r2, r2, &(0x7f00000001c0), 0x8080fffffffe) 15:11:55 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:11:55 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:11:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) utime(&(0x7f0000000000)='./bus\x00', 0x0) 15:11:55 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) setxattr$security_smack_transmute(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000200)='TRUE', 0x4, 0x2) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x200000, 0x0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000140)) 15:11:55 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) [ 194.267774] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 970769) 15:11:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) utime(&(0x7f0000000000)='./bus\x00', 0x0) 15:11:55 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) [ 194.333365] FAT-fs (loop1): Filesystem has been set read-only [ 194.363403] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 970769) [ 194.416159] audit: type=1804 audit(1570461115.764:78): pid=9455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir684005504/syzkaller.GjcBj4/72/file0" dev="sda1" ino=16884 res=1 [ 195.141501] audit: type=1804 audit(1570461116.494:79): pid=9463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir684005504/syzkaller.GjcBj4/72/file0" dev="sda1" ino=16884 res=1 15:11:58 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:11:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r2, r2, &(0x7f00000001c0), 0x8080fffffffe) 15:11:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) utime(&(0x7f0000000000)='./bus\x00', 0x0) 15:11:58 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:11:58 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:11:58 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000200)=0x2, 0x4) r1 = open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) socket$kcm(0x29, 0x0, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x2202, 0x0) ioctl$VIDIOC_RESERVED(r1, 0x5601, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xf9, 0x10000) setsockopt$inet6_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f00000001c0)=@gcm_256={{0x303}, "927cd647ce290d44", "a9550d36985ef13fe61ba23e2f32c9b95f99fa0a0ea04e3d1ca728462c5ccd0f", "6ebf8f2e", "a4ae8de331929d60"}, 0x38) setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000140)=0x1, 0x4) r4 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/access\x00', 0x2, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) r5 = syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x7, 0x200800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x8001, @mcast2, 0x70}]}, &(0x7f0000000300)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000340)={r6, 0x3}, 0x8) 15:11:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)) [ 197.277612] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 970769) [ 197.311729] FAT-fs (loop1): Filesystem has been set read-only 15:11:58 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x3c3400, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:11:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) [ 197.331812] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 970769) 15:11:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)) 15:11:58 executing program 3: sched_setattr(0x0, &(0x7f0000000140)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x523, 0x0) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdeb}}], 0x3fffffffffffd33, 0x0, 0x0) 15:11:58 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) [ 197.536848] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 970769) [ 197.557520] FAT-fs (loop1): Filesystem has been set read-only [ 197.575898] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 970769) 15:12:01 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:12:01 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) 15:12:01 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:01 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:01 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x7) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:12:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="2e0000002300817ee45de087185082cf0124b0eba06ec4a86e8f32e00586f9835b3f00009148790000f8de84c5e2", 0x2e}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) 15:12:01 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x80, 0x0) 15:12:01 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x2b) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in=@empty, 0x0, 0x4, 0x0, 0x2}}, 0xe8) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0}}], 0x400000000000107, 0x0) [ 200.367108] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 970769) [ 200.402739] FAT-fs (loop1): Filesystem has been set read-only 15:12:01 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) [ 200.423359] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 970769) 15:12:01 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) [ 200.636623] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 970769) [ 200.676534] FAT-fs (loop1): Filesystem has been set read-only 15:12:02 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r2, r2, &(0x7f00000001c0), 0x8080fffffffe) 15:12:02 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x2b) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in=@empty, 0x0, 0x4, 0x0, 0x2}}, 0xe8) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0}}], 0x400000000000107, 0x0) [ 200.698079] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 970769) [ 200.894986] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 970769) [ 200.916136] FAT-fs (loop1): Filesystem has been set read-only [ 200.932643] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 970769) 15:12:04 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:12:04 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:04 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r2, r2, &(0x7f00000001c0), 0x8080fffffffe) 15:12:04 executing program 3: dup(0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000040)={0x58, 0x0, 0x6, [{0x0, 0xfffffffffffffffd, 0x1, 0x10001, '$'}, {0x0, 0x0, 0x9, 0x0, '/dev/kvm\x00'}]}, 0x58) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) accept$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, &(0x7f00000003c0)=0x1c) r3 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4010aef4, &(0x7f0000000000)={0x0, 0x0, 0x0, r3}) ioctl$KVM_ASSIGN_SET_INTX_MASK(0xffffffffffffffff, 0x4040aea4, 0x0) 15:12:04 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:04 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x2, &(0x7f0000000040)={0x1}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:12:04 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:04 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:04 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) uselib(&(0x7f0000000040)='./file0\x00') open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:12:04 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) [ 203.425496] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 970769) 15:12:04 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:04 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x80003) [ 203.468840] FAT-fs (loop1): Filesystem has been set read-only [ 203.485857] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 970769) 15:12:04 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:12:04 executing program 4: fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000180)=""/4096) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x206041, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000080)=[@exit_looper, @enter_looper], 0x6, 0x0, &(0x7f00000000c0)="fc224d2a0ad0"}) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(0xffffffffffffffff, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:12:04 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:04 executing program 2: write(0xffffffffffffffff, &(0x7f0000000040)="0600", 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:04 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r2, r2, &(0x7f00000001c0), 0x8080fffffffe) 15:12:05 executing program 2: write(0xffffffffffffffff, &(0x7f0000000040)="0600", 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:05 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:12:05 executing program 2: write(0xffffffffffffffff, &(0x7f0000000040)="0600", 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) [ 203.804463] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 970769) 15:12:05 executing program 2: r0 = memfd_create(0x0, 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:05 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000040)={0xf, 0x8}, 0x10) [ 203.847565] FAT-fs (loop1): Filesystem has been set read-only [ 203.897225] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 970769) 15:12:05 executing program 2: r0 = memfd_create(0x0, 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:05 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r2, r2, &(0x7f00000001c0), 0x8080fffffffe) 15:12:05 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:12:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x24, &(0x7f0000000000)={0x77359400}, 0x10) 15:12:05 executing program 2: r0 = memfd_create(0x0, 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:05 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:05 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:12:05 executing program 4: r0 = open(&(0x7f0000000240)='./file0\x00', 0x460000, 0x20) fcntl$setlease(r0, 0x400, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000003c0)=ANY=[@ANYBLOB="000004d0200000000a00050000000000ff02120003001200000000000052ea3bd55aa1cc407e76edc3cd6f56270000150000000000000000c04300000010000000000000000000000000a60c000000000000000000000000a3f00000000000001e8a2500000000000000000000afec749c00000000000000002ea00000000000000000000300dbfa1ecd5a8acf0059ffebdb2323c566a71a483b18e3000000000000000000000000000000000000005b477f787d17ff0041cd327b3819b461ea5cf2bb000c7765742cddabf2f0f7b633e7b562f95dee6a4ddf1ebb5d34d3e50466a12076464b8dd5e36e478a81c7304031a99b0e67ed41e30300d3c8765a11340f01acaa9e9396e8c853dab48ef2a62544af39e0bce93f7e8dab0b3161defae979c7aeb8aa00623f5c9cf03ea2904bd542758ff405b5288e0f8c38b9e36cdf82b52e59d3b81304ccd60b4d6eb900b4dfc74920e45917ae875711e0ce34e89c163c58739757e909fab657fc9404775d346a1199b2a4fdd449579291178f26d18aa4075ca504c203e4d986a40b8878fcd572f603a484998c00000000b70968a9c1317cc831b0b1e71dacf68d2f4ca7049c3ea6965836f7c9adbd3222a3d38513c867952c656102e0f8d28c8808078e95cf0368b48791eedbfee8d4a76fd6babc40320722a35194141f11682c97fb30347d80780e1389469cfbafd7cc0242cf02dfd9614d4e1f1fe4cc5bc27e5e405c7496f0aac8bbfc01953d16b27cfc9b0be51e12088f74d3cf499742d169a2acda10bc1e09134dcad8209630f86a16426d6872fe588155b00565a93a71e108e8ee92c91a7fbc983bfddb12b8c0e2b4a2e39775310d01bf82942af4bb8d5e816b074d07e40ef809f0db88ac94fcbab43a2b3e0e5705fa9e471e0fc367f3d528a0a6"], 0x90) fcntl$setstatus(r1, 0x4, 0x80000000002c00) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$swradio(&(0x7f00000002c0)='/dev/swradio#\x00', 0x1, 0x2) write$P9_RLERROR(r4, &(0x7f0000000300)={0x28, 0x7, 0x2, {0x1f, '\\eth0-vmnet1self,vboxnet1wlan0('}}, 0x28) sendfile(r1, r3, &(0x7f0000000280), 0xb740) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_G_OUTPUT(r6, 0x8004562e, &(0x7f0000000200)) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1e) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x80000, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r7, 0x8010550e, &(0x7f0000000080)={0xffffff56, &(0x7f0000000140)="64cdc072dff8693be25e8a4cc8bc71753dacdd7d1456823b4ca4041ce0780f3f5f717a35fbcc3d43ab7466aaef9b121f87c9f610b5e11892a14cd34e7f8a95b63a554392e83d03939f63858e2443ba24230e61f555d0fb2c3b1d8f0aa0144d3b2b634fc079b2cbb7b9bbba4b00a03ffe7433589f56665bfe111da72e5affa91236f3f4e8fcb183a91d7c15654a"}) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r7, 0x5) 15:12:05 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c) 15:12:05 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:05 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:06 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c) 15:12:06 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:12:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r2, r2, &(0x7f00000001c0), 0x8080fffffffe) 15:12:06 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c) 15:12:06 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:06 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:12:06 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:06 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:06 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c) 15:12:06 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:06 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:12:06 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c) 15:12:06 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:07 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0xd5bf98d0fc1ca92f, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8c010620}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x400, 0x70bd27, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x2008100) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r4, 0x400443c8, &(0x7f0000000180)={r3, 0x5}) r5 = dup(r3) remap_file_pages(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x8, 0x180) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000040)={0x8001, 0x2, 0x4, 0x2, {0x77359400}, {0x3, 0x8, 0x0, 0x2, 0x1, 0x0, "d55308bf"}, 0xa, 0x2, @fd=r7, 0x4}) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) [ 205.771089] mmap: syz-executor.4 (9761) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. 15:12:07 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c) 15:12:07 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040), 0x0) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:07 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:12:07 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r2, r2, &(0x7f00000001c0), 0x8080fffffffe) 15:12:07 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x250000, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:12:07 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c) 15:12:07 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040), 0x0) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:07 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c) 15:12:07 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:07 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:12:07 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:07 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c) 15:12:07 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040), 0x0) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:07 executing program 0: write(0xffffffffffffffff, &(0x7f0000000040)="0600", 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:07 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:08 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r2, r2, &(0x7f00000001c0), 0x8080fffffffe) 15:12:08 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c) 15:12:08 executing program 0: write(0xffffffffffffffff, &(0x7f0000000040)="0600", 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:08 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x101100, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:12:08 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c) 15:12:08 executing program 0: write(0xffffffffffffffff, &(0x7f0000000040)="0600", 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:10 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:12:10 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040), 0x0) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:10 executing program 4: r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x40000, 0x40) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:12:10 executing program 0: r0 = memfd_create(0x0, 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:10 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c) 15:12:10 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r2, r2, &(0x7f00000001c0), 0x8080fffffffe) 15:12:10 executing program 0: r0 = memfd_create(0x0, 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:10 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040), 0x0) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:10 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c) 15:12:10 executing program 0: r0 = memfd_create(0x0, 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:10 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040), 0x0) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:10 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:13 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:12:13 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c) 15:12:13 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(0xffffffffffffffff, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:13 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:13 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0xb) fcntl$setlease(r0, 0x400, 0x3) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000080)=0x1) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:12:13 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r2, r2, &(0x7f00000001c0), 0x8080fffffffe) 15:12:13 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c) 15:12:13 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(0xffffffffffffffff, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:13 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:13 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) [ 212.153323] audit: type=1804 audit(1570461133.504:80): pid=9911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir684005504/syzkaller.GjcBj4/85/file0" dev="sda1" ino=16769 res=1 15:12:13 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c) 15:12:13 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(0xffffffffffffffff, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:16 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:12:16 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:16 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c) 15:12:16 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, 0xffffffffffffffff, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:16 executing program 1: r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) 15:12:16 executing program 4: r0 = open(&(0x7f0000000040)='./file0\x00', 0x8440, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0x1}, 0x0, 0x0, 0xfd94) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10010000000035) tkill(r1, 0x1b) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10208903, 0x0) 15:12:16 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:16 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, 0xffffffffffffffff, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:16 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c) 15:12:16 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:12:16 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040), 0x0) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:16 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, 0xffffffffffffffff, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:16 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c) 15:12:16 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:12:16 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0xc001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000000c0), 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000000)={r6}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000140)={r6, 0x26a, &(0x7f0000000280)=[@in={0x2, 0x4e27, @local}, @in6={0xa, 0x4e21, 0x7fff, @mcast2, 0x80000001}, @in6={0xa, 0x5, 0x20, @remote, 0xffff}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f00000001c0)={r9, 0x9}, 0x8) syz_init_net_socket$llc(0x1a, 0x1, 0x0) fcntl$setlease(r0, 0x400, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r11, 0x84, 0x77, &(0x7f0000000200)={r9, 0x469, 0x1, [0x5b66]}, &(0x7f0000000240)=0xa) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:12:16 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040), 0x0) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) [ 215.515565] audit: type=1804 audit(1570461136.864:81): pid=9979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir684005504/syzkaller.GjcBj4/87/file0" dev="sda1" ino=16865 res=1 15:12:17 executing program 1: r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) 15:12:17 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, 0x0, 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:17 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:12:17 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c) 15:12:17 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040), 0x0) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:17 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c) 15:12:17 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, 0x0, 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:17 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c) 15:12:17 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:17 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:12:17 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, 0x0, 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:17 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 216.254591] audit: type=1804 audit(1570461137.604:82): pid=10013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir684005504/syzkaller.GjcBj4/87/file0" dev="sda1" ino=16865 res=1 15:12:18 executing program 1: r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) 15:12:18 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x4c0400, 0x48) fcntl$setlease(r0, 0x400, 0x0) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000080)) r2 = dup(0xffffffffffffffff) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:12:18 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:12:18 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:18 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 15:12:18 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:18 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 15:12:18 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:18 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:18 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) 15:12:18 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:12:18 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:19 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) 15:12:19 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$P9_RLOCK(r2, &(0x7f0000000040)={0x8, 0x35, 0x2, 0xb310b8656e96c31f}, 0x8) fcntl$setsig(r0, 0xa, 0x1d) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x4, 0xfff}, &(0x7f0000000140)=0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000180)={r3, 0xffff, 0x1f, 0x0, 0x0, 0xb5d, 0x8, 0x1, {0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x28}}}, 0x6, 0x6b05, 0x57d, 0x9, 0x5}}, &(0x7f0000000240)=0xb0) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:12:19 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) 15:12:19 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:12:19 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) 15:12:19 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:19 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:19 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc}, 0xf) 15:12:19 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:12:19 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x828040, 0x83) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={0xfffffffffffffffd}, 0x0, 0x0, 0x5) r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x200) write$binfmt_elf32(r1, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x1, 0x1, 0xc0, 0x401, 0x3, 0x7a, 0x401, 0x3dc, 0x38, 0x382, 0x45f, 0x1000, 0x20, 0x1, 0x6, 0x88, 0x3}, [{0x5, 0x4, 0x4, 0x3e, 0x400, 0xfffffffb, 0x6, 0x1}, {0x5, 0x9, 0x8, 0xfffffffc, 0x7e, 0x75, 0x200, 0x4}], "c2ff1bf2c9071904fcbb2c06bdeaca264009e81a0c3875dafcc2dd9f1946ab7de377fbe32a59e460edab1058c70938e30ef0eb16332ff9bac949559fc1143ffb8ce7ecf8d1286bf67905ead9bf2ef23407b89b4faca83c58b8f044d48ddcdcd85666a5106873f3b535b01011e59bffbe090cf530dc045845a2435f703053453bb567863232a44635c5e999b4c3abc79707ddd203e5f89f60af09345ca272c5a2026769651a96", [[], [], [], [], [], []]}, 0x551) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x10010000000035) migrate_pages(r2, 0x9, &(0x7f00000008c0)=0x3, &(0x7f0000000900)=0x5) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x2000, 0x0) openat(r3, &(0x7f0000000880)='./file0\x00', 0x2, 0xe0346a2b692d75b1) 15:12:19 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = gettid() mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) syz_open_pts(0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) pipe2(0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) gettid() getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) getsockname$unix(r1, &(0x7f00000000c0)=@abs, &(0x7f0000000000)=0x6e) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) tkill(r0, 0x1000000000015) 15:12:19 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0xfeb8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:12:19 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) 15:12:19 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:12:19 executing program 4: fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xd6}, 0x0, 0x0, 0x274) fcntl$setsig(0xffffffffffffffff, 0xa, 0x1d) r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x40, 0x90080) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000080)={0x1e, 0x2f, 0x9, 0x13, 0x5, 0xff, 0x5, 0xd7, 0x1}) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$P9_RLINK(r3, &(0x7f0000000140)={0x7, 0x47, 0x1}, 0x7) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x90) fcntl$setstatus(r1, 0x4, 0x80000000002c00) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f00000000c0)=0x1010000000002) 15:12:19 executing program 3: r0 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r0, &(0x7f0000000240)="b156d417452c8f6d46edb3b1077f2abaa85e3489c66107abcc617d9aeb42aa515f23c9150bfdba5fa1be4e0415cb2c2d4a1cdff5ab24d3676cc093ea0ffa364b7e", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000000200), 0xff8) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='Z\x00') perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 15:12:19 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00'}, 0x18) 15:12:20 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(0xffffffffffffffff, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:12:20 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:20 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(0xffffffffffffffff, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:20 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(0xffffffffffffffff, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:20 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, 0xffffffffffffffff, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) [ 219.017740] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 15:12:20 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) 15:12:20 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:20 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, 0xffffffffffffffff, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:12:20 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0xd4fd0381beada2a5, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) prctl$PR_SET_MM(0x23, 0x50d56059a14131c7, &(0x7f0000ff9000/0x4000)=nil) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x4044, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x200, 0x40) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r4 = socket(0x0, 0x400000400080803, 0x0) r5 = dup(r4) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000001700)=0xe8) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r6}) recvfrom$packet(r2, &(0x7f0000000180)=""/67, 0x43, 0x10020, &(0x7f0000000200)={0x11, 0x7, r6, 0x1, 0x19, 0x6, @remote}, 0x14) write$P9_RREADLINK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="10783c010000000000000066696c6530"], 0x10) 15:12:20 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, 0xffffffffffffffff, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:20 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000140)={0x899, 0x1000, 0x7ff, 0x800, 0xfee}) fcntl$setsig(r0, 0xa, 0x1d) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f0000000080)=0x8) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:12:20 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x10, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:12:20 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, 0x0, 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:21 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, 0x0, 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:21 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, 0x0, 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', 0x0, 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) 15:12:21 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:21 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) r1 = open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = mq_open(&(0x7f0000000080)='md5sumppp0\x00', 0x0, 0x81, &(0x7f0000000140)={0x69, 0x3f, 0x401, 0x7f, 0x2, 0x7, 0x1, 0x5}) poll(&(0x7f0000000180)=[{r2, 0x4000}, {r4, 0x10}, {r5, 0x8}, {r1, 0x8}], 0x4, 0x7) 15:12:21 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:12:21 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:21 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:21 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:12:21 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x10, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:21 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2000, 0x0) flistxattr(r1, &(0x7f0000000080)=""/23, 0x17) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:12:21 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:21 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:22 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:12:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', 0x0, 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) 15:12:22 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:22 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x176f758d5d571e08}, 0x10) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:12:22 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:12:22 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x0) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:12:22 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:12:22 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x10, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:22 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:22 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:12:22 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:12:22 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fdatasync(r2) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:12:23 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, 0x0, 0x0) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:12:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', 0x0, 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) 15:12:23 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, 0x0, 0x0) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:12:23 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)={'syz0', "487abed52a47f507025076d8b84777e274c636e05291c7705ed9ac56d352db684ae1a35ae211f1b559f6bf61a370cb8080aaca472c59b858fffaacb94345829429efdd6ed1ee335cc6296570f6ce77acc45db25e419bde4cbe066baf0ef1bb55f85276075cd12eecf15e4641c6a3790eb975fb10e1b010a9f0b6a3ed993cc28d0d320461cb"}, 0x89) 15:12:23 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:23 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, 0x0, 0x0) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:12:23 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) mount$9p_rdma(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x10401, &(0x7f0000000180)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x3f}}, {@rq={'rq', 0x3d, 0x7fffffff}}, {@rq={'rq', 0x3d, 0x8}}, {@sq={'sq', 0x3d, 0x3}}, {@common=@loose='loose'}], [{@fsuuid={'fsuuid', 0x3d, {[0x1a, 0x64, 0x36, 0x32, 0x64, 0x33, 0x7af1d0fcbaa2844f, 0x62], 0x2d, [0x60, 0x39, 0x39, 0x31], 0x2d, [0x38, 0x34, 0x32, 0x62], 0x2d, [0x7, 0x64, 0x62, 0x38], 0x2d, [0x31, 0x65, 0xcb036897a270e62d, 0x36, 0x62, 0x37, 0x37, 0x38]}}}]}}) fcntl$setsig(r0, 0xa, 0x1d) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000003c0)=ANY=[@ANYBLOB="000004d0200000000a00050000000000ff02120003001200000000000052ea3bd55aa1cc407e76edc3cd6f56270000150000000000000000c04300000010000000000000000000000000a60c000000000000000000000000a3f00000000000001e8a2500000000000000000000afec749c00000000000000002ea00000000000000000000300dbfa1ecd5a8acf0059ffebdb2323c566a71a483b18e3000000000000000000000000000000000000005b477f787d17ff0041cd327b3819b461ea5cf2bb000c7765742cddabf2f0f7b633e7b562f95dee6a4ddf1ebb5d34d3e50466a12076464b8dd5e36e478a81c7304031a99b0e67ed41e30300d3c8765a11340f01acaa9e9396e8c853dab48ef2a62544af39e0bce93f7e8dab0b3161defae979c7aeb8aa00623f5c9cf03ea2904bd542758ff405b5288e0f8c38b9e36cdf82b52e59d3b81304ccd60b4d6eb900b4dfc74920e45917ae875711e0ce34e89c163c58739757e909fab657fc9404775d346a1199b2a4fdd449579291178f26d18aa4075ca504c203e4d986a40b8878fcd572f603a484998c00000000b70968a9c1317cc831b0b1e71dacf68d2f4ca7049c3ea6965836f7c9adbd3222a3d38513c867952c656102e0f8d28c8808078e95cf0368b48791eedbfee8d4a76fd6babc40320722a35194141f11682c97fb30347d80780e1389469cfbafd7cc0242cf02dfd9614d4e1f1fe4cc5bc27e5e405c7496f0aac8bbfc01953d16b27cfc9b0be51e12088f74d3cf499742d169a2acda10bc1e09134dcad8209630f86a16426d6872fe588155b00565a93a71e108e8ee92c91a7fbc983bfddb12b8c0e2b4a2e39775310d01bf82942af4bb8d5e816b074d07e40ef809f0db88ac94fcbab43a2b3e0e5705fa9e471e0fc367f3d528a0a6"], 0x90) fcntl$setstatus(r1, 0x4, 0x80000000002c00) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000240)) 15:12:23 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:23 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:23 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(0xffffffffffffffff, r2, 0x0) tkill(r1, 0x1002000000016) 15:12:23 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:24 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) 15:12:24 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) [ 222.892371] FAT-fs (loop1): bogus number of reserved sectors [ 222.912443] FAT-fs (loop1): Can't find a valid FAT filesystem 15:12:24 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x4282c1, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x5) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000140)={{0x92, 0x23}, 'port1\x00', 0x8, 0x100044, 0x3, 0x4, 0x7ff, 0x3, 0x1, 0x0, 0x0, 0x3d}) 15:12:24 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:24 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(0xffffffffffffffff, r2, 0x0) tkill(r1, 0x1002000000016) 15:12:24 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x10, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:24 executing program 3: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x4000, 0x0) ioctl$KVM_NMI(r1, 0xae9a) write$UHID_DESTROY(r1, &(0x7f0000000080), 0xff79) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:12:24 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) [ 223.749240] FAT-fs (loop1): bogus number of reserved sectors [ 223.769044] FAT-fs (loop1): Can't find a valid FAT filesystem 15:12:25 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:25 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:25 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(0xffffffffffffffff, r2, 0x0) tkill(r1, 0x1002000000016) 15:12:25 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) open_by_handle_at(r1, &(0x7f0000000040)={0x1b, 0x2, "5f3b9394373c75f3de6902d1ab1724de5c96b0"}, 0x2000) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:12:25 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x10, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:25 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0x10}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:12:25 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:25 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4={[], [], @local}}, {}, r3}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {r3, 0x7}}, 0x10) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r4, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) fsetxattr$security_ima(r6, &(0x7f0000000080)='security.ima\x00', &(0x7f0000000140)=@ng={0x4, 0xf, "3baaa351c5121914ee42fe0c52b713b0"}, 0x12, 0x0) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:12:25 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) mknod(&(0x7f0000000040)='\x00', 0xc000, 0xc25) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) 15:12:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) 15:12:26 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SIOCAX25ADDFWD(r2, 0x89ea, &(0x7f0000000040)={@bcast, @default}) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) [ 224.642330] FAT-fs (loop1): bogus number of reserved sectors [ 224.648186] FAT-fs (loop1): Can't find a valid FAT filesystem 15:12:26 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:26 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:26 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r2 = socket(0x0, 0x400000400080803, 0x0) r3 = dup(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f00000002c0)={{0x4, @local, 0x4e1f, 0x1, 'none\x00', 0x0, 0x9, 0x3d}, {@multicast2, 0x4e24, 0x1, 0x4, 0x6, 0x4}}, 0x44) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000001700)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r6}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@remote, @in6=@mcast2, 0x4e24, 0x1ff, 0x4e20, 0x1, 0xa, 0x80, 0x1d0, 0x67, r6, r7}, {0x3, 0x4, 0x1, 0xf54, 0x2, 0x7, 0x80, 0x80}, {0x59017857, 0x100000000, 0x7, 0xd3cb}, 0x3, 0x6e6bb9, 0x0, 0x0, 0x0, 0x3}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x2b}, 0x2, @in=@loopback, 0x3501, 0x3, 0x0, 0x9, 0x3e, 0x8, 0x6}}, 0xe8) 15:12:26 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, 0xffffffffffffffff, 0x0) tkill(r1, 0x1002000000016) 15:12:26 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x10, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:26 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10488a02, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000040)={0x7, 0x0, 0x7}) write(0xffffffffffffffff, &(0x7f0000000080)="5ef3522615dc7024be1be9403bcb5a1d36bc90686b5d60dab12a7fbfd471fa9597367979072061102f8642ff72db4886f31ae5581e4e", 0x36) 15:12:26 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:26 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) [ 225.487907] FAT-fs (loop1): bogus number of reserved sectors [ 225.504191] FAT-fs (loop1): Can't find a valid FAT filesystem 15:12:26 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:27 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:27 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, 0xffffffffffffffff, 0x0) tkill(r1, 0x1002000000016) 15:12:27 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:27 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x0, 0x2) ioctl$KVM_SMI(r1, 0xaeb7) r2 = open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TUNSETVNETBE(r4, 0x400454de, &(0x7f0000000040)) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000080)=[0x6f, 0x38780000]) 15:12:27 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:27 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x5304cd621e7ea34d) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) [ 226.207525] audit: type=1804 audit(1570461147.554:83): pid=10542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir684005504/syzkaller.GjcBj4/111/file0" dev="sda1" ino=17010 res=1 15:12:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) 15:12:27 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) [ 226.350586] FAT-fs (loop1): bogus number of reserved sectors [ 226.376420] FAT-fs (loop1): Can't find a valid FAT filesystem 15:12:27 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:27 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, 0xffffffffffffffff, 0x0) tkill(r1, 0x1002000000016) 15:12:27 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:28 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pwrite64(r1, &(0x7f0000000140)="e2f3a8d4222e6984a9d3f75fe635e3cd15658f931a3d393851dcf84b2144d22f8bde9620417e330ada4209d2149e739544bdfee458fa79f08be509e74651eac2b16f0202db69376642180e7d23f2010a5afce9a2bb15622b93de02abcae29f38b7d6810f8ed6ce0867b511c80a3ddc1ef9ed9dce9d04dbb0dab5d5e1c8de1a7bff700bb43f293e603cd88c98c1cc1cce31beaad74daa8d0924b8ac9c2ce60dc6daaa2cf88cc78bec661ad5505f", 0xad, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r2, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff80) fcntl$setsig(r2, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:12:28 executing program 4: r0 = open(&(0x7f0000000140)='./file0/file0\x00', 0x121000, 0x20) vmsplice(r0, &(0x7f0000000540)=[{&(0x7f00000000c0)="c7", 0x1}, {&(0x7f0000000300)="8425eb6e787a4cdc5147ab396672031c83a2024f37626a4313a2e39fc125c49bf2d6e5b8ab1a85be1578f4dca7cfaef24e38d175a498e6f26eb71bcb00bcc153e9384b60fe96e5d211", 0x49}, {&(0x7f0000000380)="c944d62b43d4ad48c030b8983bda1381513db8600dab6fec187b693a0150c9d38e5f751ecb5f73078e567957acb46e87d42a5dd83b1c6b72d4cbdaa7", 0x3c}, {&(0x7f00000003c0)="02f92b5128890a6d51fcfcb286f5bce69fd61da6283fa6fd6d21082890c65ac27aafc77c1349fa477bf2327da3397b885ddf7cbed4a9e42a15db5fff7f41dfce53bc4361af12ba62805c315511b9572bedceb8f5b5922c911ec0547329ad0f952d83131a11118465e23350e1369aa04c31e482c9861f1a0f1a1aa8d26338b91a7ef070dc9a79ddc44c5b90599becafc393442b9126ea1d9fc2ae33a5dfbd1ea71d08", 0xa2}, {&(0x7f0000000480)="9f0f0ee0fc0b7284031bb626edccc2db2c266204d3f2daf4f99e69cb32b3fc29407258cc33ea5c477362be66", 0x2c}, {&(0x7f00000004c0)="0a2a8f2fa67a9d02426d5d784644e1d5925d229a740f", 0x16}, {&(0x7f0000000500)='-2-', 0x3}], 0x7, 0x8) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0x7ff}, 0x0, 0x0, 0xffffffffffffffef) clone(0x1101c080, &(0x7f0000000180)="17de4f0f5e7be80bc51e22cd9afdc05ffc4375790a053a69a32367041c37fb446057ff45053e311025f22d3ad729335d4e410d062fb2af66b34067ec892080d3ecc562a1511f21195ad133ff4c5bf932dcd18ad5219d33c39097dafc15ef0522938299f231dcec0eb997614f6615c217ea06010a03f57ee534ef4aae916191092237e96f5a0166bcb04463a29480077a37ff0186e88f719c91dbecc515cbd0dc30dc981c3761796858f1b5470e028fee6b469a993675e9c4ae12af9269b12870e269518c90876954adedc9e6321b6fca9fc3bd3fc6d7d326ce86eacf11275dbe115b9b95b5897c2973a76619", &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000280)="8c80d38bbe11f9cc9945071811f36f6e29f4e06611464add541d133a8ff8d948bcf3848ba44d6ff7730116766e1feec981ed497169ec704d7039cd93b052397e98a9db3d505f") fcntl$setsig(r0, 0xa, 0x1d) rt_sigsuspend(&(0x7f00000005c0)={0x2}, 0x8) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:12:28 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) 15:12:28 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) [ 227.217428] FAT-fs (loop1): bogus number of reserved sectors [ 227.236634] FAT-fs (loop1): Can't find a valid FAT filesystem 15:12:28 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, 0x0, &(0x7f0000000340)) 15:12:28 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r1, 0x0) tkill(0x0, 0x1002000000016) 15:12:28 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:28 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:29 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) [ 228.046058] FAT-fs (loop1): bogus number of reserved sectors [ 228.052638] FAT-fs (loop1): Can't find a valid FAT filesystem 15:12:29 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, 0x0, &(0x7f0000000340)) 15:12:29 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r1, 0x0) tkill(0x0, 0x1002000000016) 15:12:29 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:29 executing program 4: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x10010000000035) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x2e, 0x1, @tid=r0}, &(0x7f0000000300)=0x0) timer_settime(r1, 0x0, &(0x7f0000004f40)={{0x0, 0x1c9c380}, {0x77359400}}, &(0x7f0000004f80)) timer_settime(r1, 0x3, &(0x7f0000000bc0)={{0x0, 0x989680}}, &(0x7f0000000340)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(r1, 0x2, &(0x7f0000000080)={{r2, r3+30000000}}, &(0x7f0000000140)) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r4, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r4, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:12:29 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x1, 0x900) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/mls\x00', 0x0, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f00000001c0)={0x0, 0x0, [], @bt={0xfff, 0x1f, 0x8000, 0x0, 0x0, 0x80000000, 0x4, 0x4}}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x121) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r2, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000040)={0x2}) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r2, 0xa, 0x1d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$RTC_IRQP_READ(r4, 0x8008700b, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000280)={0xa3, 0xe8d, 0x1ff}) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:12:29 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:29 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:12:30 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$RTC_UIE_ON(r2, 0x7003) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:12:30 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) 15:12:30 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) name_to_handle_at(r2, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x1008, 0x8000, "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"}, &(0x7f0000001180), 0x800) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video2\x00', 0x2, 0x0) 15:12:30 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) [ 228.949518] FAT-fs (loop1): bogus number of reserved sectors [ 228.961389] FAT-fs (loop1): Can't find a valid FAT filesystem 15:12:30 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:30 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r1, 0x0) tkill(0x0, 0x1002000000016) 15:12:30 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:30 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, 0x0, &(0x7f0000000340)) 15:12:30 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000040)) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x277, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000280)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000001c0)={0xb641, 0x800, 0x7, 0x101}, 0x8) keyctl$dh_compute(0x17, &(0x7f0000000580)={r2, r1, r1}, &(0x7f0000000740)=""/243, 0xf3, 0x0) pkey_free(0xffffffffffffffff) keyctl$read(0xb, r1, &(0x7f0000000140)=""/75, 0x4b) 15:12:30 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:30 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) r1 = dup(0xffffffffffffffff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@uid={'uid', 0x3d, r2}}]}) r3 = socket$unix(0x1, 0x8000000000000005, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@gid={'gid', 0x3d, r4}}]}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000200)=0x0) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f00000002c0)={{{@in, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) r11 = socket$unix(0x1, 0x8000000000000005, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@gid={'gid', 0x3d, r12}}]}) r13 = dup(0xffffffffffffffff) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@uid={'uid', 0x3d, r14}}]}) r15 = socket$unix(0x1, 0x8000000000000005, 0x0) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@gid={'gid', 0x3d, r16}}]}) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000400)={0x358, 0x0, 0x5, [{{0x0, 0x3, 0x4b, 0xf7, 0x4, 0x7, {0x4, 0x9, 0xfffffffeffffffff, 0x80, 0x7fff, 0x9, 0x1f, 0x7, 0xffffff7f, 0x9, 0xb7, r2, r4, 0x9, 0xffffffff}}, {0x1, 0xfffffffffffffffc, 0x11, 0x9, '(posix_acl_access'}}, {{0x2, 0x0, 0x80000001, 0x200, 0x475, 0xca9, {0x0, 0x3, 0x1ff, 0xa1cf, 0x9, 0x0, 0x0, 0x8000, 0xff, 0x1, 0x7, r5, r6, 0x8}}, {0x6, 0x80, 0x6, 0xffffffff, 'md5sum'}}, {{0x6, 0x0, 0x4d59, 0x7f, 0x1ff, 0xffffff01, {0x4, 0x2, 0x1b98, 0x9c9, 0x200, 0xb9de, 0x6, 0x5, 0x400, 0x7ff, 0xc076, r7, 0x0, 0x401, 0xfff}}, {0x4, 0x1537, 0xd, 0xffffffff, '\'##+(^-eth1~{'}}, {{0x0, 0x1, 0x6, 0x4, 0x80000000, 0x8, {0x3, 0x1, 0x0, 0x1, 0x9, 0xb624, 0x100, 0x100, 0x1, 0x6, 0xffffffff, r10, r12, 0x2, 0x599b}}, {0x5, 0xfff, 0x7, 0x4, ',,wlan1'}}, {{0x5, 0x1, 0x1475430d, 0x9, 0x180000, 0x7, {0x4, 0x728c, 0x6, 0x6, 0x2, 0xd8, 0x1d, 0x7, 0x101, 0x113b28a0, 0x1, r14, r16, 0x3, 0xfffffe00}}, {0x2, 0x7fff, 0x13, 0x100, ')#cpusetwlan0ppp0($'}}]}, 0x358) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x21) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) [ 229.454381] ntfs: (device loop4): parse_options(): Unrecognized mount option . [ 229.634668] ntfs: (device loop4): parse_options(): Unrecognized mount option . 15:12:31 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) 15:12:31 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x0) 15:12:31 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), 0x0) 15:12:31 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) [ 230.069787] FAT-fs (loop1): bogus number of reserved sectors [ 230.086835] FAT-fs (loop1): Can't find a valid FAT filesystem 15:12:31 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:32 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$rxrpc(r2, &(0x7f0000000040)="3e9eca7d227d740edf1586173a1abc3c7a11", 0x12, 0x4008040, 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x1d) r3 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x20, 0x14400) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:12:32 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x0) 15:12:32 executing program 4: r0 = open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000080)='./file0\x00', 0x10109802, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000200)={0xa, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) 15:12:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) 15:12:32 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), 0x0) [ 230.984258] FAT-fs (loop1): bogus number of reserved sectors [ 231.014809] FAT-fs (loop1): Can't find a valid FAT filesystem 15:12:32 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:32 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, 0x0, &(0x7f0000000340)) 15:12:33 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x40) 15:12:33 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x0) 15:12:33 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) 15:12:33 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:33 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), 0x0) 15:12:33 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) [ 231.816342] FAT-fs (loop1): bogus number of reserved sectors [ 231.867227] FAT-fs (loop1): Can't find a valid FAT filesystem 15:12:33 executing program 3: write(0xffffffffffffffff, &(0x7f0000000040)="0600", 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:33 executing program 3: write(0xffffffffffffffff, &(0x7f0000000040)="0600", 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:33 executing program 3: write(0xffffffffffffffff, &(0x7f0000000040)="0600", 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:33 executing program 3: r0 = memfd_create(0x0, 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:33 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000000)) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xa10001}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r3, @ANYBLOB="20002bbd7000fedbdf2507000000080004000800000048000200080002004e230000080008000900000008000900ffff000008000e004e22000008000b000a00000014000100fe80000000000000000000000000000b08000300040000004c0003000800030000000000140002006772653000000000000000000000000008000400ba000000080008007f0000001400066dd4000000000000000000ffffac14149a0800010002000000"], 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x0) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x223c80, 0x10) 15:12:33 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, 0x0, &(0x7f0000000340)) 15:12:33 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = gettid() arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x10010000000035) fcntl$lock(r1, 0x5, &(0x7f0000000080)={0x1, 0x0, 0x200, 0x0, r2}) open(&(0x7f0000000040)='./file0\x00', 0x10008802, 0x0) 15:12:33 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000040)) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:12:33 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) 15:12:33 executing program 3: r0 = memfd_create(0x0, 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:34 executing program 3: r0 = memfd_create(0x0, 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:34 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:34 executing program 5: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) [ 232.683178] FAT-fs (loop1): bogus number of reserved sectors [ 232.709207] FAT-fs (loop1): Can't find a valid FAT filesystem 15:12:34 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) symlinkat(&(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000080)='./file0\x00') fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:12:34 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:34 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:34 executing program 4: socketpair$tipc(0x1e, 0x7ba70d9698e7ee7d, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) r3 = open(&(0x7f0000000140)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r3, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x6) fcntl$setsig(r3, 0xa, 0x1d) open(&(0x7f0000000180)='./file0\x00', 0xa00, 0x29) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000040)={0x2f, 0x3}) r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f00000001c0)={0x3, r1}) 15:12:34 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, 0x0, &(0x7f0000000340)) 15:12:34 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:34 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$evdev(r2, &(0x7f0000000140)=[{{0x0, 0x7530}, 0x11, 0xfffe, 0xff}, {{0x0, 0x2710}, 0xf8d685783f6138dc, 0x3, 0x101}, {{0x0, 0x7530}, 0x3, 0x0, 0x5}, {{r3, r4/1000+10000}, 0x14, 0x80, 0x7f}, {{0x0, 0x2710}, 0x1, 0x7ff, 0xffffff7f}, {{0x0, 0x7530}, 0x0, 0xff, 0x2}], 0x90) getrlimit(0x8, &(0x7f0000000040)) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:12:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) 15:12:34 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:34 executing program 2: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000040)) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:12:34 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000003c0)=ANY=[@ANYBLOB="000004d0200000000a00050000000000ff02120003001200000000000052ea3bd55aa1cc407e76edc3cd6f56270000150000000000000000c04300000010000000000000000000000000a60c000000000000000000000000a3f00000000000001e8a2500000000000000000000afec749c00000000000000002ea00000000000000000000300dbfa1ecd5a8acf0059ffebdb2323c566a71a483b18e3000000000000000000000000000000000000005b477f787d17ff0041cd327b3819b461ea5cf2bb000c7765742cddabf2f0f7b633e7b562f95dee6a4ddf1ebb5d34d3e50466a12076464b8dd5e36e478a81c7304031a99b0e67ed41e30300d3c8765a11340f01acaa9e9396e8c853dab48ef2a62544af39e0bce93f7e8dab0b3161defae979c7aeb8aa00623f5c9cf03ea2904bd542758ff405b5288e0f8c38b9e36cdf82b52e59d3b81304ccd60b4d6eb900b4dfc74920e45917ae875711e0ce34e89c163c58739757e909fab657fc9404775d346a1199b2a4fdd449579291178f26d18aa4075ca504c203e4d986a40b8878fcd572f603a484998c00000000b70968a9c1317cc831b0b1e71dacf68d2f4ca7049c3ea6965836f7c9adbd3222a3d38513c867952c656102e0f8d28c8808078e95cf0368b48791eedbfee8d4a76fd6babc40320722a35194141f11682c97fb30347d80780e1389469cfbafd7cc0242cf02dfd9614d4e1f1fe4cc5bc27e5e405c7496f0aac8bbfc01953d16b27cfc9b0be51e12088f74d3cf499742d169a2acda10bc1e09134dcad8209630f86a16426d6872fe588155b00565a93a71e108e8ee92c91a7fbc983bfddb12b8c0e2b4a2e39775310d01bf82942af4bb8d5e816b074d07e40ef809f0db88ac94fcbab43a2b3e0e5705fa9e471e0fc367f3d528a0a6"], 0x90) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000280)={0x4a, 0x6f, 0x2, {0x5, [{}, {0x8d, 0x1}, {0x80, 0x0, 0x3}, {0x8, 0x4, 0x1}, {0x44, 0x4, 0x7}]}}, 0x4a) fcntl$setstatus(r3, 0x4, 0x80000000002c00) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000140)={{0x6, 0x6, 0x10001, 0x8, 'syz1\x00', 0xf5}, 0x0, 0x400, 0x6ec1, r4, 0x2, 0xed97, 'syz0\x00', &(0x7f0000000080)=['em1\\)\x00', '\x00'], 0x7, [], [0x9, 0xfff8, 0x1]}) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:12:34 executing program 5: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:34 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:34 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="57080045f6d17400000000000000"], 0xe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c8, 0x589100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000680), &(0x7f00000006c0)=0xc) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) [ 233.548578] FAT-fs (loop1): bogus number of reserved sectors [ 233.568952] FAT-fs (loop1): Can't find a valid FAT filesystem 15:12:35 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:35 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040), 0x0) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:35 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), 0x0) 15:12:35 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040), 0x0) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:35 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040), 0x0) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:35 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) 15:12:35 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$ax25(r2, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x7}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:12:35 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:35 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) 15:12:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) 15:12:35 executing program 5 (fault-call:5 fault-nth:0): r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) [ 234.394999] FAT-fs (loop1): bogus number of reserved sectors 15:12:35 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x90) fcntl$setstatus(r1, 0x4, 0x80000000002c00) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000040)=""/122, 0x7a}, {&(0x7f0000000140)=""/35, 0x23}], 0x2) [ 234.447316] FAT-fs (loop1): Can't find a valid FAT filesystem 15:12:35 executing program 2 (fault-call:9 fault-nth:0): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:12:36 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), 0x0) 15:12:36 executing program 4: r0 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) [ 235.031149] audit: type=1804 audit(1570461156.384:84): pid=10967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir684005504/syzkaller.GjcBj4/132/file0" dev="sda1" ino=16996 res=1 15:12:36 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) 15:12:36 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8000, 0x20080) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$input_event(r0, &(0x7f0000000140)={{r1, r2/1000+30000}, 0x17, 0x8, 0xffffff3a}, 0x18) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0x5, &(0x7f0000000240)=0x3, 0x4) r6 = syz_open_dev$dmmidi(&(0x7f0000000280)='/dev/dmmidi#\x00', 0xac6, 0x2000) sendmsg$TIPC_NL_NAME_TABLE_GET(r6, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x234, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x64, 0x4, [@TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x8c, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2b2a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}, @TIPC_NLA_LINK={0x58, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80ea}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}]}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9318938}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x5c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7e14}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x401}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8001}]}, @TIPC_NLA_BEARER={0x54, 0x1, [@TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xffff, @loopback, 0x8}}}}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x40000}, 0x0) fcntl$setlease(r3, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r3, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) r7 = request_key(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)='\x00', 0x0) r8 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r8, 0xffffffffffffffff, 0x0) keyctl$negate(0xd, r7, 0x1, r8) 15:12:36 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x44) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000040)='./file0\x00', 0x10008802, 0x0) [ 235.325211] FAT-fs (loop1): bogus number of reserved sectors [ 235.340144] FAT-fs (loop1): Can't find a valid FAT filesystem [ 235.423618] FAULT_INJECTION: forcing a failure. [ 235.423618] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 235.435974] CPU: 1 PID: 10968 Comm: syz-executor.2 Not tainted 4.14.147 #0 [ 235.443001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 235.452362] Call Trace: [ 235.454963] dump_stack+0x138/0x197 [ 235.458611] should_fail.cold+0x10f/0x159 [ 235.462770] ? save_trace+0x290/0x290 [ 235.466582] __alloc_pages_nodemask+0x1d6/0x7a0 [ 235.471263] ? find_held_lock+0x35/0x130 [ 235.475336] ? __alloc_pages_slowpath+0x2930/0x2930 [ 235.480457] ? lock_downgrade+0x740/0x740 [ 235.484617] alloc_pages_current+0xec/0x1e0 [ 235.489191] __get_free_pages+0xf/0x40 [ 235.493100] __tlb_remove_page_size+0x2c5/0x4f0 [ 235.498138] unmap_page_range+0xacd/0x1770 [ 235.502398] ? vm_normal_page_pmd+0x360/0x360 [ 235.507775] ? uprobe_munmap+0x94/0x210 [ 235.511763] unmap_single_vma+0x15d/0x2c0 [ 235.515928] unmap_vmas+0xac/0x170 [ 235.519481] exit_mmap+0x285/0x4e0 [ 235.523030] ? SyS_munmap+0x30/0x30 [ 235.526677] ? kmem_cache_free+0x244/0x2b0 [ 235.530920] ? __khugepaged_exit+0xcf/0x3d0 [ 235.535250] ? mm_update_next_owner+0x450/0x5d0 [ 235.539931] mmput+0x114/0x440 [ 235.543233] do_exit+0x71d/0x2c10 [ 235.546702] ? find_held_lock+0x35/0x130 [ 235.550963] ? mm_update_next_owner+0x5d0/0x5d0 [ 235.555651] do_group_exit+0x111/0x330 [ 235.559554] get_signal+0x381/0x1cd0 [ 235.563277] ? ucma_write+0x10b/0x310 [ 235.567086] ? ucma_open+0x290/0x290 [ 235.570900] do_signal+0x86/0x19a0 [ 235.574447] ? ucma_open+0x290/0x290 [ 235.578165] ? kernel_read+0x120/0x120 [ 235.582071] ? __inode_security_revalidate+0xd6/0x130 [ 235.587266] ? setup_sigcontext+0x7d0/0x7d0 [ 235.591671] ? selinux_file_permission+0x85/0x480 [ 235.596554] ? check_preemption_disabled+0x3c/0x250 [ 235.601584] ? kick_process+0xef/0x180 [ 235.605493] ? task_work_add+0x8e/0xf0 [ 235.609392] ? fput+0xd4/0x150 [ 235.612626] ? exit_to_usermode_loop+0x3d/0x220 [ 235.617310] exit_to_usermode_loop+0x15c/0x220 [ 235.621906] do_syscall_64+0x4bc/0x640 [ 235.625795] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 235.630653] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 235.635845] RIP: 0033:0x459a59 [ 235.639032] RSP: 002b:00007ff6d539cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 235.646754] RAX: fffffffffffffe00 RBX: 00007ff6d539cc90 RCX: 0000000000459a59 [ 235.654063] RDX: 0000000000009918 RSI: 00000000200001c0 RDI: 0000000000000004 [ 235.661340] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 15:12:37 executing program 5: r0 = memfd_create(&(0x7f0000000080)='\vem1\xc1\xf8\xa6\x8dF\xc0\xa3\\\xe2\xcb\x9e\xa2\xba\xe5\xf4\x97\xac#*\xff\xde\x8e\xb9=\\>\x14\xdee\xb0\xc0\xee\x83`\x9c\x86\xfc\x9eq\xe2\xe23_O\x97\b\xa2\x0e\xff\xf8\xd0\xce\xe4]\xb1\x11\x02\x05\ve\x12C\xf2m\xcb\xae\xd1\xbc\xfb\xd6\xfc_\x1b\xd4\xe4\x93e-\x8f\x85\t\xa8Y\xf6#`\v\xbc\xddjF--h\xb3\x13\xae\xda\xe2\xeeD+YrP\xdf\xf9\xbc{\xf6\"\xa8\x81p\xb4\x84\xcd:5\t\x02\xa9\x95\xe7\xc1\v\xb8\x0f\xfeYR\x81\xf4U\xe5\x11\xe7\xad\'\xf6\xbdT#ih\v|\xc1\xdf\f/\xe7\x81\xa9D\xe2\x82u\x9e>\x9a\xd5Z\t\xcbS\\2\x8f>!\xb7O\x89h\x97\t\xda', 0x4) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x4000, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000140)={0x6, 0x1, 'client1\x00', 0x1, "ec752feaab93f193", "0e3f84bd565863efd4c2f09458c80a690269f44de29b7504a209a271b29242a3", 0x3, 0x7f}) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:37 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), 0x0) [ 235.668636] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff6d539d6d4 [ 235.675912] R13: 00000000004d0f48 R14: 00000000004e1700 R15: 0000000000000008 15:12:37 executing program 5: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x2000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000080)=[@decrefs={0x40046307, 0x3}], 0xd0, 0x0, &(0x7f0000000180)="101a7ca944b49d11ac35cd4d9394db7288c15d9a3845f5b629e6f08c422d3404c52e7af4ad0a6ecd36628b3e8a14d091bdbb3fd3355eddf6cf4be1f911a91c9398fe65bb5ec6701e6f1d6f53ad714410fc50c4e7f3723e5c79442c19ca32f74a6028e61b876796b2d4996d8e1402ed2582de2d49a7092eb95e23ef0efb415c763d5017b5d7c80a2dd0debb8bf71d073daccac9bda1d5ea9533ea17ce0c5c25d730203aad77a7e2f48e06135de4e5e58c63a09a1344f2429e720aa4f2f8c5f81feca665ac8a38b91f3ab782cfd16b967e"}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bind$nfc_llcp(r4, &(0x7f0000000280)={0x27, 0x0, 0x2, 0x1, 0xfe, 0x5, "f0a5673f3aac68cf0d137190df2a0311e19c4ad1edca05ac06327ff5e23f267ba71923f3b836ddaf345ed6d3dba99bd9372da88b33e7c98713d0b39abeeaf8", 0x1a}, 0x60) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:37 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) 15:12:37 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = fcntl$dupfd(r6, 0x0, r2) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000040)={'rose0\x00', 0x400}) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:12:37 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040), 0x0) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:37 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040), 0x0) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:37 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x2) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040), 0x10) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) [ 236.175098] FAT-fs (loop1): bogus number of reserved sectors [ 236.200127] FAT-fs (loop1): Can't find a valid FAT filesystem 15:12:37 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040), 0x0) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:37 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0xff) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x27}, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000100)={0x32e83958495d31ba, 0x70, 0x4, 0xac, 0x4, 0x1, 0x0, 0xff, 0x80020, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000080), 0x6}, 0x40, 0x5, 0xcc, 0x10, 0x4, 0x0, 0x9}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f0000000180)={0x2, 0x7, [@remote, @local, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="953eb4acc288", @broadcast]}) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:12:37 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(0xffffffffffffffff, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:37 executing program 2: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x10010000000035) r1 = getpgid(0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x90) fcntl$setstatus(r2, 0x4, 0x80000000002c00) r3 = epoll_create(0x7) r4 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, &(0x7f0000000080)={r3, r4, 0x3}) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r7, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r5, r7, 0x0) tkill(r6, 0x1002000000016) [ 236.414708] audit: type=1804 audit(1570461157.764:85): pid=11037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir684005504/syzkaller.GjcBj4/136/file0" dev="sda1" ino=16998 res=1 15:12:37 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x90) fcntl$setstatus(r3, 0x4, 0x80000000002c00) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup3(r5, 0xffffffffffffffff, 0x80000) ioctl$sock_inet6_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000040)) listen(r3, 0x800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:12:37 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(0xffffffffffffffff, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:38 executing program 5: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x3, 0x0) openat$cgroup_ro(r2, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0) 15:12:38 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) 15:12:38 executing program 0 (fault-call:5 fault-nth:0): r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:38 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(0xffffffffffffffff, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:38 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = getpid() fcntl$lock(r2, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x80000000, 0x148, r3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000236000/0x2000)=nil, &(0x7f0000468000/0x2000)=nil, 0x2000, 0x1, 0x6}) ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) [ 237.020704] FAT-fs (loop1): bogus number of reserved sectors [ 237.032731] FAT-fs (loop1): Can't find a valid FAT filesystem 15:12:38 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, 0xffffffffffffffff, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:38 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000000600)={0xfffffffffffffffe}, 0x0, 0xfffffffffffffdc5) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) r1 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x3, 0x4000) setsockopt$packet_buf(r1, 0x107, 0x0, &(0x7f0000000180)="de5593dba759157d75d73edf8b84506b1071f12d890b1e58403005d181b37d99a4ff1e4bb5174db151d406881d920c41e2f6a88b8f2650961265c9332943f8a49996fddfdf4118c8d35fe185ff7babacd79eb045eadb35137455e08b7a97997b9d21316e3551cdd1ee0808bbfa1f99e3a236601e8a2dc207ea5f06265991b2d3eb19743775d832f40eff59f09a1d1188d6891025e7de30f6c226b663d41e766d5e43c46214", 0xa5) r2 = syz_open_dev$radio(&(0x7f0000000300)='/dev/radio#\x00', 0x1, 0x2) socket$inet(0x2, 0xa, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='/dev/vcsa#\x00', r4}, 0x10) ioctl$int_out(r5, 0x0, &(0x7f00000005c0)) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x4}) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000240)=0x4, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000500)=0x3a, 0x4) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e22, 0x101, @remote, 0x9}]}, &(0x7f00000003c0)=0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$GIO_UNIMAP(r10, 0x4b66, &(0x7f00000007c0)={0x1, &(0x7f0000000740)=[{}]}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000400)={r8, @in6={{0xa, 0x4e22, 0xfffffffb, @dev={0xfe, 0x80, [], 0xe}, 0x3ff}}}, &(0x7f00000004c0)=0x84) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000040)={0x6, 0x180, 0x8, 0x3f, 0xce, 0x1000}) fcntl$setsig(r0, 0xa, 0x1d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r11) open_by_handle_at(r11, &(0x7f0000000640)=ANY=[@ANYBLOB="cc00000000000080edf8db95c7fc30ab09000dd65d08aeb77ff60234b55e9104edefac15164728649335d1322078622f4b63baa99f2155c3eb41c7e7e4bd2e1d7f5db0ef5e62c1d46e0e7c9f932f76399562b81a50b120fa3eb528c5752a480e555d15e84b609e18f645ca297f74e4d178766a0f33c630788f2666db73c0ddbe9cc82e65078f015df427a3013df24a8f72eb65933dab7ada3498e801812f870821a771b5a6e036c29005d3d5d56e228efbe84f491c6bcce42b3cd849dfcc98f23f0ba837fb67632e7460dea9"], 0x2) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:12:38 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x101280, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x6, 0xfffffffd}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000180)={r3, 0x6, 0x10, 0x2, 0x80000001}, &(0x7f0000000240)=0x18) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xbf12) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$NBD_SET_SOCK(r8, 0xab00, r10) dup3(r0, r4, 0x0) tkill(r1, 0x1002000000016) 15:12:38 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, 0xffffffffffffffff, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) [ 237.316671] syz-executor.4 uses obsolete (PF_INET,SOCK_PACKET) 15:12:38 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, 0xffffffffffffffff, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:38 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000140)=""/35) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x3, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r3, 0xc0406619, &(0x7f0000000080)={{0x0, 0x0, @reserved="fcf5d2651bf42431664d61480b20f09c6b41b8fdefdb31b3b8d4401994612cbf"}}) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:12:38 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0xffffffffffffff70) fchmodat(r4, &(0x7f0000000040)='./file0\x00', 0x2) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:12:38 executing program 5: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0xed) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:39 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) 15:12:39 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, 0x0, 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:39 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x80000, 0x2) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:12:39 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x0, 0xfa0e, {0x0}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) 15:12:39 executing program 5: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000080)=0xffffffff) mmap(&(0x7f0000002000/0xa000)=nil, 0xa000, 0x100001f, 0x6010, r0, 0x10) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0x40) 15:12:39 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x90) fcntl$setstatus(r3, 0x4, 0x80000000002c00) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x4, 0x10, r5, 0x1ffe) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:39 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, 0x0, 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) [ 237.879036] FAT-fs (loop1): bogus number of reserved sectors [ 237.898949] FAT-fs (loop1): Can't find a valid FAT filesystem 15:12:39 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, 0x0, 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:39 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f00000001c0)) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) r3 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r3, 0xffffffffffffffff, 0x0) r4 = request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000140)='\x00', r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_inet6_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000340)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat$cgroup_subtree(r8, &(0x7f0000000300)='cgroup.subtree_control\x00', 0x2, 0x0) keyctl$reject(0x13, r4, 0x6, 0x1, 0xfffffffffffffffe) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:12:39 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:39 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:39 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) 15:12:40 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:40 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x2, &(0x7f0000000040)={0xfffffffffffffffe}, 0x0, 0x15) rt_sigtimedwait(&(0x7f0000000080)={0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffd8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10290800, 0xaf9539df464fc0f1) 15:12:40 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7, 0x8001) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, &(0x7f0000000080)={0x4379907a, 0x4, [0x2]}) [ 238.737470] FAT-fs (loop1): invalid media value (0x00) 15:12:40 executing program 5: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x170) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000080), &(0x7f0000000000)=0x40) 15:12:40 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) ioctl$TIOCNOTTY(r0, 0x5422) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000040)=0x3, &(0x7f0000000080)=0x4) [ 238.760148] FAT-fs (loop1): Can't find a valid FAT filesystem 15:12:40 executing program 5: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000000)={0x1ff, 0x1, 0x1f, 0x6, 0x7}, 0x14) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:40 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:12:40 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, &(0x7f0000000040)) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:12:40 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) renameat2(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x6) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, &(0x7f0000000140)={0x7, 0x2}) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x4) 15:12:40 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:40 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x4, 0x8, 0x3, [], &(0x7f0000000040)={0xa2095b, 0xb01, [], @value64=0x7f}}) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:12:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) [ 239.668720] FAT-fs (loop1): invalid media value (0x00) [ 239.689578] FAT-fs (loop1): Can't find a valid FAT filesystem 15:12:41 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000180), 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x90) fcntl$setstatus(r3, 0x4, 0x80000000002c00) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f0000000080)={'icmp\x00'}, &(0x7f0000000100)=0x1e) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f0000000000)={{0x2, 0x0, @reserved="b367dee1113a3ff63de23f8ba90c78f3ee7afb878d3debba3f0122b4af1752fd"}}) 15:12:41 executing program 5: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x80001000004, 0x10, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:41 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$cgroup_int(r3, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) fcntl$setlease(r4, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000000180)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) write$P9_RWALK(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="4a0000006f010005000a04000000040000000000000004020000000500000000000000410400000001000000000000000403000020070000000000000001020000000700000000000000"], 0x4a) fcntl$setsig(r0, 0xa, 0x15) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) [ 240.124307] audit: type=1804 audit(1570461161.474:86): pid=11261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir684005504/syzkaller.GjcBj4/147/file0" dev="sda1" ino=17087 res=1 15:12:41 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) [ 240.553345] FAT-fs (loop1): invalid media value (0x00) [ 240.577455] FAT-fs (loop1): Can't find a valid FAT filesystem 15:12:42 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="2e65377e104f7ad7d9d7c8c3c1173558367c63e06fb02c147fb08b6827b6888293b823b243cf611fb22c13e669f2d4c8c7029dc39f5ea0896ee21a529a1dff842ed473e703375d932998b2617c8ba679c976fc53c403e9ed288e40cafa922858bf81fb353906fa827eb6dfbf8394b631310d53d83127840ecc69ddb200e7c81929845290ddf9e2a9e7ae96d30559c6b66f732c3b9a5718d97d9ca35ce7683747c5b38246e4f9b1cbde8eaf2489be910e3cc2d7e52a5dd1d9c79ea86d83514f17eb806cdc88f577000000000055013a8254f0f02beefb529743e592a7b3fbf00af9d1da83c354ceb3f6fd2c888674549d6c2d6597ed29c25cf27fd37eb3da5c5c38c4c28ee61ad95cdbbe5f4610ae73b82b290e8973216d1846ef35c6a36a6a4b27e4541433e4a146c6a9d6d432b8042a916a99f74d9c53c0006c0d7a0bdb9f9982c3d2f70695a081cc30363a64880800000035a1392a626420edd072aff9198b499e15fe696b485a643aa39144ca1e07932fd6a9f4336fe5eace"], 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:42 executing program 5: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000080)={0x0, @adiantum}) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0xfffffffffffffd21) 15:12:42 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) ppoll(&(0x7f0000000040)=[{r0, 0x5024}], 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f0000000140)={0x7}, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r7) fcntl$dupfd(r6, 0x0, r7) ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f0000000480)) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0xc1, 0x0) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000300), &(0x7f0000000340)=0x4) ioctl$PPPIOCSFLAGS1(r8, 0x40047459, &(0x7f00000002c0)=0x400440) r9 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r13, 0x6, 0x21, &(0x7f0000000240)="30048900", 0xa5a4f0a2f42e463b) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) mount(&(0x7f0000000380)=@filename='./file0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='msdos\x00', 0x1000, &(0x7f0000000440)='[\x00') 15:12:42 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x10, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:42 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) 15:12:42 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000140)=""/33) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) rt_sigprocmask(0x4, &(0x7f0000000040)={0x3}, &(0x7f0000000080), 0x8) [ 241.422550] FAT-fs (loop1): invalid media value (0x00) [ 241.451367] FAT-fs (loop1): Can't find a valid FAT filesystem 15:12:42 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x5) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:12:43 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) sendfile(r0, r1, &(0x7f0000000000)=0x53, 0x8001) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:43 executing program 5: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x4010, r0, 0x100000) r1 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x2000, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000000c0)={0x10000, &(0x7f0000000000), 0x9, r4, 0x4}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) [ 241.688137] audit: type=1804 audit(1570461163.034:87): pid=11315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir684005504/syzkaller.GjcBj4/150/file0" dev="sda1" ino=16674 res=1 15:12:43 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x10, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:43 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) [ 242.288177] FAT-fs (loop1): invalid media value (0x00) [ 242.303974] FAT-fs (loop1): Can't find a valid FAT filesystem 15:12:43 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) sendto$rose(0xffffffffffffffff, &(0x7f0000000040)="8344dea2bc22e0b89f8c19e7f8bbbe888fd9f5", 0x13, 0x40040, &(0x7f0000000080)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:12:43 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x507000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x4, 0x3, 0x0, 0x5}) write(r0, &(0x7f0000000040)="0600", 0x2) r4 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x8, 0x2502) ioctl$BLKRAGET(r4, 0x1263, &(0x7f0000000080)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:43 executing program 5: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) init_module(&(0x7f0000000000)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x17, &(0x7f0000000080)='\x00') sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000180)) r3 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x1e21ec27, 0x280502) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000100)=0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:44 executing program 0: write(0xffffffffffffffff, &(0x7f0000000040)="0600", 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:44 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)='F\x00', 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0x20, 0x10000) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000240)=0x10000) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x90) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$KDGKBMODE(r4, 0x4b44, &(0x7f00000001c0)) fcntl$setstatus(r2, 0x4, 0x80000000002c00) r5 = accept4$inet(r1, 0x0, &(0x7f00000000c0), 0x180000) ioctl$SIOCGSTAMPNS(r5, 0x8907, &(0x7f0000000100)) sendfile(r2, r1, &(0x7f0000000000), 0x8) 15:12:44 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x40000, 0x0) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000080)) 15:12:44 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x3b8) pselect6(0x40, &(0x7f0000000040)={0x1, 0x2, 0x0, 0x10001, 0x7f, 0xffc, 0x5, 0x7}, &(0x7f0000000080)={0x7, 0x8, 0x4db, 0x8, 0x3, 0x9, 0xffffffffffffffc0, 0xad0c}, &(0x7f0000000140)={0x100000000, 0xb5e, 0x4, 0x81b, 0xe0000000000, 0x1f, 0xef37, 0xd7}, &(0x7f0000000180)={0x77359400}, &(0x7f0000000200)={&(0x7f00000001c0)={0x9}, 0x8}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000003c0)=ANY=[@ANYBLOB="000004d0200000000a00050000000000ff02120003001200000000000052ea3bd55aa1cc407e76edc3cd6f56270000150000000000000000c04300000010000000000000000000000000a60c000000000000000000000000a3f00000000000001e8a2500000000000000000000afec749c00000000000000002ea00000000000000000000300dbfa1ecd5a8acf0059ffebdb2323c566a71a483b18e3000000000000000000000000000000000000005b477f787d17ff0041cd327b3819b461ea5cf2bb000c7765742cddabf2f0f7b633e7b562f95dee6a4ddf1ebb5d34d3e50466a12076464b8dd5e36e478a81c7304031a99b0e67ed41e30300d3c8765a11340f01acaa9e9396e8c853dab48ef2a62544af39e0bce93f7e8dab0b3161defae979c7aeb8aa00623f5c9cf03ea2904bd542758ff405b5288e0f8c38b9e36cdf82b52e59d3b81304ccd60b4d6eb900b4dfc74920e45917ae875711e0ce34e89c163c58739757e909fab657fc9404775d346a1199b2a4fdd449579291178f26d18aa4075ca504c203e4d986a40b8878fcd572f603a484998c00000000b70968a9c1317cc831b0b1e71dacf68d2f4ca7049c3ea6965836f7c9adbd3222a3d38513c867952c656102e0f8d28c8808078e95cf0368b48791eedbfee8d4a76fd6babc40320722a35194141f11682c97fb30347d80780e1389469cfbafd7cc0242cf02dfd9614d4e1f1fe4cc5bc27e5e405c7496f0aac8bbfc01953d16b27cfc9b0be51e12088f74d3cf499742d169a2acda10bc1e09134dcad8209630f86a16426d6872fe588155b00565a93a71e108e8ee92c91a7fbc983bfddb12b8c0e2b4a2e39775310d01bf82942af4bb8d5e816b074d07e40ef809f0db88ac94fcbab43a2b3e0e5705fa9e471e0fc367f3d528a0a6"], 0x90) fcntl$setstatus(r1, 0x4, 0x80000000002c00) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000300)={'lo\x00', 0x4}) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000240)=""/136) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x385) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:12:44 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x10, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:44 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) 15:12:44 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x194) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) [ 243.338244] FAT-fs (loop1): invalid media value (0x00) [ 243.352850] FAT-fs (loop1): Can't find a valid FAT filesystem 15:12:44 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r1, 0x6, &(0x7f0000000580)="c2e804eb7a6b3d6bc3fe3771c497e89405bab56f16c135d086ed4f3a1491fb7c934820bdf0df4471fa7c0811c973c311631277641b1ed6e523b726501279188b7fc19e2a7e0c9d79faf48143c56b33b16c7d3eed17ca82791e8044c4480c1fd07a0218d322b52d5e68d00adcd12ce3528a18a63222ee114cf5335659f5f83f62cc8d0f") r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) socket(0x0, 0x400000400080803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup(r5) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0x319) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r6}) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa0204}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x58, r2, 0xaf15cf1e7a28e16c, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e20}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x3a}, @FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x2c}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x90010}, 0x8000) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f00000004c0)={0x3f, 0x0, 'client1\x00', 0x1, "ed94a517b764f0d7", "7e4c86c8c1ab2c723b4a790796e90f0e0abd3bdf235e6cca74f79e8541737b9a", 0x8, 0x4}) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:12:45 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x0) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x1) 15:12:45 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) fchdir(r2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0xffffffffffffff2c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x90) fcntl$setstatus(r5, 0x4, 0x80000000002c00) socket$isdn(0x22, 0x3, 0x1723707b61485a9d) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000180)={0xbde2, 0x7, 0x8, 0x0, 0x0, [{}, {r3, 0x0, 0x2}, {r4, 0x0, 0x3}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0x5}, {r0, 0x0, 0x8000}, {r5, 0x0, 0x80000000}]}) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x7, 0x101000) 15:12:45 executing program 5: r0 = memfd_create(&(0x7f0000000140)='\vem1\xa6\xc2hFN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) fallocate(r0, 0x3, 0x5, 0x80000001) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_dccp_int(r2, 0x21, 0x4, &(0x7f0000000080)=0xfffffffb, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet_tcp_TLS_RX(r5, 0x6, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "64faf0cbd943755b", "b30aa35be6102466840168b39a55c755", "f895a55d", "d6fe6629c511a4ca"}, 0x28) 15:12:45 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x581040, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000280)={0x10000, 0x9f2, &(0x7f0000000100)="fd79431a1fc88a7bdf0dc06ab496e8639d3bbffca30742c21ba3ef20a9b5", &(0x7f0000000180)="20e670732285c4dab533458bfd4617b9705ed40b75ebd1da675a59807556d5e834081e6c1f921e6cd537a1bfc3820a2cd58f5673a93b8993bb12533f06c367d875bd5bf242c1fd0dbc8ba83104d115d71e625103c238b30a33c3d4cdfaf64eee645c921722f1b8f0d68bebb6edd0681eaf648063f27acbba4cdf03fdb702d282410dd43a7c15dd3b648da2512177ea3ccc42ed094e9fd2ddb52693d3c26d6d2407b1cc0c2bf5204684885394151f4a8748f4bff506ee99091707715c9295ba8efda7", 0x1e, 0xc2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x80081) 15:12:45 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0xf, &(0x7f0000000180)=""/31, &(0x7f00000001c0)=0x1f) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x8, 0x88002) fcntl$getflags(r1, 0x2) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, &(0x7f0000000140)=0x7, 0x4) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:12:45 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) 15:12:45 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x2b6d00, 0x0) fanotify_mark(r2, 0x62, 0x40000002, r3, &(0x7f0000000080)='./file0\x00') fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:12:45 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) [ 244.698793] FAT-fs (loop1): invalid media value (0x00) [ 244.724582] FAT-fs (loop1): Can't find a valid FAT filesystem 15:12:46 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x90) fcntl$setstatus(r1, 0x4, 0x80000000002c00) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fcntl$setlease(r3, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1d) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 15:12:46 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000000, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r2 = socket$l2tp(0x18, 0x1, 0x1) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x1, 0x4) 15:12:46 executing program 5: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x6, 0x4c0200) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(0xffffffffffffffff, r0, &(0x7f0000001000)=0x400000000000, 0xffffffffffff0001) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x22000, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000080), &(0x7f0000000340)=0x33e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) accept$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0x14) r11 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r11, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r12 = socket(0x0, 0x400000400080803, 0x0) r13 = dup(r12) getsockopt$inet6_IPV6_IPSEC_POLICY(r13, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000001700)=0xe8) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r14}) getpeername$packet(r4, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000740)=0x14) recvmmsg(0xffffffffffffffff, &(0x7f00000082c0)=[{{&(0x7f0000000780)=@alg, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000800)=""/207, 0xcf}, {&(0x7f0000000900)=""/168, 0xa8}, {&(0x7f00000009c0)=""/89, 0x59}, {&(0x7f0000000a40)=""/90, 0x5a}, {&(0x7f0000000ac0)=""/95, 0x5f}, {&(0x7f0000000b40)=""/221, 0xdd}, {&(0x7f0000000c40)=""/156, 0x9c}, {&(0x7f0000000d00)=""/91, 0x5b}, {&(0x7f0000000d80)}], 0x9, &(0x7f0000000e80)=""/218, 0xda}, 0x8}, {{&(0x7f0000000f80)=@alg, 0x80, &(0x7f0000001580)=[{&(0x7f0000001040)=""/60, 0x3c}, {&(0x7f0000001080)=""/40, 0x28}, {&(0x7f00000010c0)=""/234, 0xea}, {&(0x7f00000011c0)=""/154, 0x9a}, {&(0x7f0000001280)=""/106, 0x6a}, {&(0x7f0000001300)=""/3, 0x3}, {&(0x7f0000001340)=""/196, 0xc4}, {&(0x7f0000001440)=""/19, 0x13}, {&(0x7f0000001480)=""/250, 0xfa}], 0x9, &(0x7f0000001640)=""/15, 0xf}}, {{&(0x7f0000001680)=@can={0x1d, 0x0}, 0x80, &(0x7f0000002900)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/52, 0x34}, {&(0x7f0000002740)=""/44, 0x2c}, {&(0x7f0000002780)=""/198, 0xc6}, {&(0x7f0000002880)=""/69, 0x45}], 0x5}, 0x5}, {{&(0x7f0000002980)=@ethernet, 0x80, &(0x7f0000003c40)=[{&(0x7f0000002a00)=""/162, 0xa2}, {&(0x7f0000002ac0)=""/22, 0x16}, {&(0x7f0000002b00)=""/234, 0xea}, {&(0x7f0000002c00)=""/10, 0xa}, {&(0x7f0000002c40)=""/4096, 0x1000}], 0x5}, 0xc6b}, {{&(0x7f0000003cc0)=@isdn, 0x80, &(0x7f0000008040)=[{&(0x7f0000003d40)=""/4096, 0x1000}, {&(0x7f0000004d40)=""/4096, 0x1000}, {&(0x7f0000005d40)=""/253, 0xfd}, {&(0x7f0000005e40)=""/20, 0x14}, {&(0x7f0000005e80)=""/102, 0x66}, {&(0x7f0000005f00)=""/4096, 0x1000}, {&(0x7f0000006f00)=""/82, 0x52}, {&(0x7f0000006f80)=""/162, 0xa2}, {&(0x7f0000007040)=""/4096, 0x1000}], 0x9}, 0x9}, {{&(0x7f0000008100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000008280)=[{&(0x7f0000008180)=""/62, 0x3e}, {&(0x7f00000081c0)=""/189, 0xbd}], 0x2}, 0x200}], 0x6, 0x2000, &(0x7f0000008440)) r17 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r17, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r18 = socket(0x0, 0x400000400080803, 0x0) r19 = dup(r18) getsockopt$inet6_IPV6_IPSEC_POLICY(r19, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000001700)=0xe8) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r20}) sendmsg$TEAM_CMD_OPTIONS_GET(r6, &(0x7f0000008680)={&(0x7f0000000180), 0xc, &(0x7f0000008640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="88010000", @ANYRES16=r7, @ANYBLOB="120926bd7000ffdbdf250200000008000100", @ANYRES32=r10, @ANYBLOB="6c0102003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004006565000008000600", @ANYRES32=r15, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004004000000008000600", @ANYRES32=r16, @ANYBLOB="38000100240001006c625f73746174735f72651ce472f3f61cefafd3bf6702af1ee866726573685f696e74657276616c000000000000000800010100000000000004000300000038000100240001006d636173745f72656a6f696e5f696e74407276616c0000000000000000000000080003000300000008000400010000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r20], 0x188}, 0x1, 0x0, 0x0, 0x64000044}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x7, @empty, 0xa1}, @in={0x2, 0x4e23, @empty}], 0x2c) [ 245.169555] audit: type=1804 audit(1570461166.514:88): pid=11454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir684005504/syzkaller.GjcBj4/159/file0" dev="sda1" ino=16577 res=1 15:12:46 executing program 5: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) fcntl$setpipe(r1, 0x407, 0x5) 15:12:46 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) [ 245.567902] FAT-fs (loop1): invalid media value (0x00) [ 245.584327] FAT-fs (loop1): Can't find a valid FAT filesystem 15:12:47 executing program 4: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:47 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x1, 0x8010, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x90) fcntl$setstatus(r2, 0x4, 0x80000000002c00) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000080)=0x1e) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) [ 245.741545] audit: type=1804 audit(1570461167.094:89): pid=11443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir684005504/syzkaller.GjcBj4/159/file0" dev="sda1" ino=16577 res=1 15:12:47 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:47 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) 15:12:47 executing program 5: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0x40) [ 246.473129] FAT-fs (loop1): invalid media value (0x00) [ 246.498332] FAT-fs (loop1): Can't find a valid FAT filesystem 15:12:48 executing program 0: openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/validatetrans\x00', 0x1, 0x0) r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80001000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:48 executing program 4: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:48 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:48 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) 15:12:48 executing program 5: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) syncfs(r1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:48 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80002000004, 0x11, r0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x6, 0x40000) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) 15:12:49 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = getpid() fcntl$lock(r2, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x80000000, 0x148, r3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000236000/0x2000)=nil, &(0x7f0000468000/0x2000)=nil, 0x2000, 0x1, 0x6}) ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:12:49 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = getpid() fcntl$lock(r2, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x80000000, 0x148, r3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000236000/0x2000)=nil, &(0x7f0000468000/0x2000)=nil, 0x2000, 0x1, 0x6}) ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:12:49 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) 15:12:49 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = getpid() fcntl$lock(r2, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x80000000, 0x148, r3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000236000/0x2000)=nil, &(0x7f0000468000/0x2000)=nil, 0x2000, 0x1, 0x6}) ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:12:49 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:49 executing program 5: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x81, 0x0) syncfs(r2) 15:12:49 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000240)={'team_slave_1\x00', {0x2, 0x4e23, @rand_addr=0xfff}}) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180)=0x4, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x400400, 0x0) write$P9_RLCREATE(r4, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x20, 0x0, 0x2}, 0xfd}}, 0x18) r5 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000100)={0x0, 0x40000, r5}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000140)={r8, 0x180000}) 15:12:49 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = getpid() fcntl$lock(r1, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x80000000, 0x148, r2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000236000/0x2000)=nil, &(0x7f0000468000/0x2000)=nil, 0x2000, 0x1, 0x6}) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r1, 0x0) 15:12:49 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x10000, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x2) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x494280) ioctl$LOOP_SET_FD(r6, 0x4c00, r7) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) readv(r4, &(0x7f0000000100)=[{&(0x7f0000000080)=""/12, 0xc}, {&(0x7f0000000180)=""/192, 0xc0}, {&(0x7f00000000c0)=""/60, 0x3c}, {&(0x7f0000000240)=""/80, 0x50}], 0x4) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:49 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000240)="8e0a63bfbb2176e91e4a1d5acc03edca60f06a818f3a8216aaad9a52f7484e65799eb4ae54ac49e557be12c2b1e2ac11999b8856e59125e388d06e50e4e27ac52fce81c98579be71945b47c5392ad2b79151f42bf7a7c02dc2947c71fb3f3372addcb5989a535626f6e20df75f4e643bb9e95561cbc11c6884cd9241c540a861b99307e1705843190181224352f09eb2193bd5a9042e3dee349fdb920a89e2230ca2a476ab873cac9aa3f26a8de832a62f16008ccab7a77ca05a8ab2451f5378b1adc59767484a503a4355ea3cb4569f015b4d530f226c", &(0x7f0000000040)="0557b59482048a45d217cdcbd07f75efc72c"}}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:12:50 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x984b2a4c3116a7d4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = gettid() ptrace$setopts(0x4206, r9, 0x0, 0x0) tkill(r9, 0x10010000000035) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@dev}}, &(0x7f0000000480)=0xe8) r11 = socket$unix(0x1, 0x8000000000000005, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@gid={'gid', 0x3d, r12}}]}) r13 = gettid() ptrace$setopts(0x4206, r13, 0x0, 0x0) tkill(r13, 0x10010000000035) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r15 = socket$unix(0x1, 0x8000000000000005, 0x0) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@gid={'gid', 0x3d, r16}}]}) stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = dup(r18) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) r20 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r20, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r20, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r20, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_MCAST_MSFILTER(r20, 0x29, 0x30, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x90) fcntl$setstatus(r20, 0x4, 0x80000000002c00) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = dup(r21) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r24 = dup(r23) ioctl$PERF_EVENT_IOC_ENABLE(r24, 0x8912, 0x400200) sendmsg$unix(r2, &(0x7f0000000880)={&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000080)="406209a4a23a6c2b19ecd3a999a1152c", 0x10}, {&(0x7f0000000240)="f78ff50e990ca49b87ca7d7b37daa664b8f3ec1d424f001b4f12a847ffbaa0c4bf0c1cb75fcd1c45bce0df28947c9477b325d10370003ae1398009749196d41a768685b1cdb523942e92ff6395720f83d971640311ea0acf0e549ec4a80772982d4612ccf7c0eb9f55b3c2530d0ca659921268510fb5809375dc7f5224ce4ccd1a742d5c5734ad6a3d766680718a7e4bd84f365711468024ad1600", 0x9b}, {&(0x7f0000000300)="5542d57d0661b5a4e8c6492437c3c4bcd205d29f828702754f72ac22aa60535266b24c91e9d3b3719add1fa47cf8ea6d2a1967b5e7df911782572b791b258958ddd27cb2c402d5e843", 0x49}, {&(0x7f0000000380)="2023db09b19466a9d025984b3787041b26e543f86da69d5445dd95c43ed4b05f92bfd53ec677b3e4d23bd42e5a35035c9eb936162130487c4cb87a96819e19a268b32b70fecdc266d78dd1365b26a97b9b019f7e9ade950ef1d5f03b612a4bba0f43f6a84181b4c97dce00332fc148dde6abad7bcacd969b2246af2284a658653930e98b8f43067e2af546bcf0ba201e383b127ea102a1584c9324c747d187a1d427125191e04a8b706c90cae18a1fd510b9d798806059cfae84bc4c0069790fe1c27a89ce22d41742470a165d7bce2a948f07ddbd542716f17225b58e8b4755", 0xe0}], 0x4, &(0x7f0000000780)=[@rights={{0x1c, 0x1, 0x1, [r3, r4, r6]}}, @rights={{0x18, 0x1, 0x1, [r0, r8]}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r12}}}, @cred={{0x1c, 0x1, 0x2, {r13, r14, r16}}}, @cred={{0x1c, 0x1, 0x2, {r1, 0xee01, r17}}}, @rights={{0x24, 0x1, 0x1, [r19, r20, r0, r22, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r24]}}], 0xe0, 0x40000800}, 0x20009001) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r25 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r27 = dup(r26) ioctl$PERF_EVENT_IOC_ENABLE(r27, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r25, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r25, 0x0) tkill(r1, 0x1002000000016) 15:12:50 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000240)="21094d5d754a335c586d16c2602b8273b66650633fc8d6af2b2d192ce5ae1629171003ae07e899bdeac1c0eeb4c62024cbdb66093fc99fd7d2856323e64bf5fb8e2347db4a4071c5b149634414c157dc5bb685679e060db9229f7a7f85ceabeb397b3094ebef135c1463a75b1fbbc10852d9fa2073390f1cd6aa3ec15c0a329d8981483ebb7e6b550dc48b4b30d193a1dcb2ef1f16b134846ba183208d4e90121bd49f37b311eb47cc250936a8084f0a47ce7913d21f8199dc6a0ccbd14394719edb80ec8dbd2a01a2d3a5dc5d3a0162aae6dd68aae1508e3f3f1d", &(0x7f0000000140)}}, &(0x7f0000044000)) syz_open_dev$audion(&(0x7f0000000480)='/dev/au\x87io#\x00', 0xfffffffffffffffb, 0x206a80) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000600)='/dv/\x00\x00\x00\x00\x00\x00\x00\xc0nd/rdmcm\x00 \x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r4 = dup3(r0, r0, 0x0) tkill(0x0, 0x1002000000016) ioctl$TIOCNOTTY(r4, 0x5422) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) accept4$inet(r5, &(0x7f00000003c0)={0x2, 0x0, @broadcast}, &(0x7f0000000500)=0x10, 0xa838473698f7e88c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = dup2(r6, r10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r14 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) shmat(r14, &(0x7f0000fee000/0x2000)=nil, 0x5000) r15 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r16 = shmat(r15, &(0x7f0000fee000/0x2000)=nil, 0x5000) shmdt(r16) r17 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r18 = shmat(r17, &(0x7f0000fee000/0x2000)=nil, 0x5000) shmdt(r18) sendmsg$TIPC_NL_MON_PEER_GET(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[]}}, 0x2a27d004d5dff826) sendmsg$TIPC_NL_NODE_GET(r11, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100001}, 0xc, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="00007cd8184b53c1c6", @ANYRES16=r13, @ANYBLOB="08002dbd7000fbdbdf250d0000002400090008000200080000000800010029000000080002007f000000080002002b360000780004002400070008000200020000000800040003000000080003000101000008000400ff0300002c000700080001000200000008000200030000000800020008000000080002000000002008000100050000002400070008000300040000000800030008000000080002008100000008000300010000003000040014000700080001000d00000008000300000000000c00010073797a30000000000c00010073797a3000000000ec1dbdc97b55aff77717212cba4539bff03b4fe552c98bf142eba47aa8f99a0ce60e1ccad2c435ecc3abb7804e9c1182e574c61d3089b1ba988216afc082e453e6695d861503f2322465fcece81b84fc84cabd30672224717d4d9d9803d235337a5ec5126a38ca7ab6ecd0c1c37b5210cf2151c05120541ecff9133dad0eb612959fefc5dc7f34f5edf195ad18f01b83de73fc85e7bf6ec3896666d6fe7f06bb7c47dd47bd34174ad3770101000000000000707258d8b5ba25d61cd3ba58762721f627a1edfafce64f"], 0xe0}, 0x1, 0x0, 0x0, 0x4004064}, 0x4000) getsockopt$inet_buf(r5, 0x0, 0x1e, &(0x7f0000000080)=""/6, &(0x7f0000000100)=0x6) 15:12:50 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:50 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) 15:12:50 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x22) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept4$alg(r3, 0x0, 0x0, 0x80000) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x90) fcntl$setstatus(r8, 0x4, 0x80000000002c00) ioctl$void(r8, 0x5450) r9 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) getsockname$ax25(r9, &(0x7f0000000240)={{0x3, @rose}, [@remote, @remote, @rose, @bcast, @null, @default, @netrom, @netrom]}, &(0x7f00000002c0)=0x48) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000100)={0xbfce, {{0xa, 0x4e24, 0x8, @rand_addr="e1bf8e9487bf6c134fe160b0ad5aa45e", 0xfffffffc}}}, 0x88) dup3(r0, r4, 0x0) r10 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x20a000, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(r10, 0x3b72, &(0x7f0000000080)={0x20, 0x3, 0x1ff, 0x1, 0x2}) tkill(r1, 0x1002000000016) 15:12:50 executing program 5: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x8) write(r0, &(0x7f0000000040)="06", 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000080)={0x7, 0x5, 0x6}) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:50 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = getpid() fcntl$lock(r1, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x80000000, 0x148, r2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000236000/0x2000)=nil, &(0x7f0000468000/0x2000)=nil, 0x2000, 0x1, 0x6}) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) 15:12:50 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) io_setup(0x1, &(0x7f00000000c0)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x90) fcntl$setstatus(r3, 0x4, 0x80000000002c00) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x882000, 0x0) r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/hash_stats\x00', 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000400)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0x1000, r3, &(0x7f0000000180)="b569f28c0aca258d110fd7eb437ec36edcb7c1f14ea32523d1515815bd54ea083893b6607f4254aaca93352f9cf25c4e0331de7bcc939bf10212a811a059018d7fbbda0a099df9768b91", 0x4a, 0x3ff, 0x0, 0x2, r4}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0xedd5acb3707c3c94, 0xf7, r5, &(0x7f0000000280)="fe5801e3156d293af93b408c0dfa7d78ad332eed0a0b44645b1762ea849bdd5d7a3c943fe54f69458a48b6920ed80289ebb48d3bac4867de2ae30e31e48a9aa93f9ac5d08ca5a771d6952fcfec92c4af2a42adc18b53f4c5f0c699bf8a82a753eeea0a11e4954c60253b0a95db8d60bbe6bed1e766808b587fca790d9443ed7d38a34a68c8de7b50d351b7ccae059b35502e94aa5fdc5c0147cf6f1b0374f1d6397c7ed335430b4c2929d0fdbd03f934c6d111da29181e75", 0xb8, 0x2}]) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x1080c0, 0x0) r7 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x20000800) inotify_rm_watch(r6, r7) 15:12:51 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, 0x0, &(0x7f0000000340)) 15:12:51 executing program 5: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) sendfile(r0, r0, &(0x7f0000001000), 0xcd) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:51 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040)="e97756d58f4c8253005b9cf61942bf13cf7cb00d", &(0x7f0000000240)="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"}}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x40) 15:12:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r2, r2, &(0x7f00000001c0), 0x8080fffffffe) 15:12:51 executing program 5: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x90) fcntl$setstatus(r1, 0x4, 0x80000000002c00) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mISDNtimer\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000180)={'nat\x00', 0x0, 0x4, 0x86, [], 0x2, &(0x7f0000000000)=[{}, {}], &(0x7f0000000080)=""/134}, &(0x7f0000000200)=0x78) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) ioctl$UI_GET_SYSNAME(r4, 0x8040552c, &(0x7f0000000240)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) setsockopt$inet_group_source_req(r9, 0x0, 0x2e, &(0x7f0000000680)={0x76, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x108) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) accept$nfc_llcp(r7, &(0x7f0000000280), &(0x7f0000000300)=0x60) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) accept4$nfc_llcp(r11, 0x0, &(0x7f00000003c0), 0x80800) 15:12:51 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = getpid() fcntl$lock(r1, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x80000000, 0x148, r2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000236000/0x2000)=nil, &(0x7f0000468000/0x2000)=nil, 0x2000, 0x1, 0x6}) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) 15:12:51 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000040)={0x5, 0x29b, 0x200, 0x5}, 0x10) r3 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r7 = socket$pptp(0x18, 0x1, 0x2) getsockopt$sock_int(r7, 0x1, 0x35, &(0x7f0000000080), &(0x7f0000000100)=0x4) dup3(r0, r4, 0x0) tkill(r3, 0x1002000000016) 15:12:51 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x277, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000280)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RLOCK(r4, &(0x7f0000000100)={0x8, 0x35, 0x2}, 0x8) keyctl$dh_compute(0x17, &(0x7f0000000580)={r2, r1, r1}, &(0x7f0000000740)=""/243, 0xf3, 0x0) keyctl$instantiate_iov(0x14, r1, &(0x7f0000000580)=[{&(0x7f0000000080)="03f22a1b97af49d5f6799bde14fc3e3cdc2a4885e29ac18a072249bfef25baef951d29490922eba6dabb7de9b5b691bf96454635d5c2a21bfedd962ec1fef9bf2400b7af2c1c025d46e8f2f92a796f2b72659fc36cf280055dd080c7205cb903a5061c23c56e90", 0x67}, {&(0x7f0000000180)="8122fc6074bc0b3924789360b18ff920c8e03ff8914c1a8484af7c39f55adacb5ec670c5ced52f5cb0e5d6ba3cfdba3c06748e81d11019b892309f8272919184b08d523ddbc29f96bb02c24e2339af85f307558979060fdd33088f876a60dbe300a5cfb9b0e135ae", 0x68}, {&(0x7f0000000200)="49d5dc3e3bd00d537d39ec152bc4aaa2bd3d4a2418b1569ff313074dbb952af6d8e4cf9cde4b5daaae0b048a9f213194ef00f7d6ecffd064a34cd5eb4334179ffc115ac9ea02ead149bb4e3a3835bd4681b4978cca41026d26b3ca7a221ac044b0b17371731676eb830eedbc165e151232d25b558207149e6c685b313b13ef151b2ab62bfdb0d4ee891840f5029ca9d07ed6b75723444f3c7ba9716a3138168f48dc0d85ad16fd2e21f2e1efaac432bc37df60fde2e32381d089ee488f5914d63f2006f4a244101c09ac2f77355981e9e3be674ea9d376adf464820cd4044f88f4e7056fc0925c1f44b2bf5a", 0xec}, {&(0x7f00000003c0)="c6ea8ae643ad80ac13b21de4cec5dac0f4722bae12ee7985a3ea587c0c91f7013d001c6fb2282ec089186461650230c5f215ec5d1e505b1e9678e4da2c0f0ac5cd6ec3df502ae93f0b8b3f141028e18b8fd9c6812015643de9cd326eb4d7e3c586ac8749eeb2950c0a8957f1a87f7de50171c2ee0236f6bd9d28cc8e9ed2bd3654c040ad6e316a1ab7d71cfd148aca", 0x8f}, {&(0x7f0000000480)="bd6ca33104202dc5d36c4d5b56ab9e5ef02130c6dcc4d12cc6f46a3e877e439208ded9a1e33474f66a3e8f947a42387befb7c90396cbb4bfe1882636e099f45f52dd3d9410a5217b8faeeeff3e8631d89c67efe79b6f898b341f9517f8c6736ae81b37cf70f4d267f80a8829f7cabd18bc3d6ef0e38fbd9301bdf87f0485f0777a83060c8dbfa5a5ff3868527557f9eacd057a70b5e94b71bf88d9bc77cebb7afdd7abb99cbc415a297e1af732cf4864a77ee1cedead5b723b8470e812cd13f0a8", 0xc1}], 0x5, 0x0) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) 15:12:51 executing program 5: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) pipe(&(0x7f0000000000)) 15:12:52 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, 0x0, &(0x7f0000000340)) 15:12:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[], 0x11d) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0xfff7fffffffffffe}) sendfile(r2, r2, &(0x7f00000001c0), 0x8080fffffffe) 15:12:52 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = getpid() fcntl$lock(r1, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x80000000, 0x148, r2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000236000/0x2000)=nil, &(0x7f0000468000/0x2000)=nil, 0x2000, 0x1, 0x6}) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) 15:12:52 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r2 = socket(0x9, 0x1, 0x7) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000500)='fou\x00') ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'vcan0\x00', 0x0}) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000002}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r3, 0x110, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x14000080}, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000080)) r5 = msgget$private(0x0, 0xe9) msgsnd(r5, &(0x7f0000000180)={0x4, "d51e7eb2575bb6b1e356fb98e862ba1ccf4db993354848c90e0ddf1a2a4f92722123457fcc6560851206865c3c46e936a1bf50ee191698d675b1f2362a2a030d034f9064ec363649531d3a76160c95ecd68949feafa60ff70159673f0ac64385083de39ff6dc691377fa0304559a040917d96862c8f95219e08fee210a0e4965cde28691804344296b541569b222e35cc70b58b7c68a65c72bd6c6cad9748c4bc8cb79822ea35fa57f19acf434d6b15da7e6b55ae21b61bccc8503551bf37a856080c2294e05750faffad2a5a4296fda2cf3c77d660cb1b9425d0ccb66813c95362c4438ea69a37499956356"}, 0xf4, 0x1000) 15:12:52 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0xfffffffffffffe96) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000180)=ANY=[@ANYBLOB="edafff8f8e3ecd"]) ioctl$KVM_RUN(r8, 0xae80, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x90) fcntl$setstatus(r5, 0x4, 0x80000000002c00) setsockopt$sock_int(r5, 0x1, 0xc, &(0x7f0000000040)=0x3ff, 0x4) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 15:12:52 executing program 5: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000003000/0xc000)=nil, 0xc000, 0x80000000004, 0x11, r0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x3d) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000080), &(0x7f0000000000)=0x2) [ 251.514235] ================================================================== [ 251.521881] BUG: KASAN: null-ptr-deref in kvm_write_guest_virt_system+0x64/0x90 [ 251.529374] Write of size 24 at addr (null) by task syz-executor.2/11709 [ 251.537084] [ 251.538732] CPU: 0 PID: 11709 Comm: syz-executor.2 Not tainted 4.14.147 #0 [ 251.546104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 251.555467] Call Trace: [ 251.558069] dump_stack+0x138/0x197 [ 251.561703] ? vprintk_func+0x65/0x159 [ 251.565607] ? kvm_write_guest_virt_system+0x64/0x90 [ 251.570721] kasan_report.cold+0x127/0x2af [ 251.574963] check_memory_region+0x123/0x190 [ 251.579373] memset+0x24/0x40 [ 251.582489] kvm_write_guest_virt_system+0x64/0x90 [ 251.587423] handle_vmread+0x548/0x730 [ 251.591312] ? vmx_deliver_posted_interrupt+0x340/0x340 [ 251.596697] ? __lock_is_held+0xb6/0x140 [ 251.600775] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 251.606227] ? vmx_deliver_posted_interrupt+0x340/0x340 [ 251.611599] vmx_handle_exit+0x20d/0x1330 [ 251.615748] ? vcpu_enter_guest+0xd2d/0x5210 [ 251.620166] vcpu_enter_guest+0xf28/0x5210 [ 251.624412] ? save_trace+0x290/0x290 [ 251.628219] ? __lock_is_held+0x90/0x140 [ 251.632286] ? emulator_read_emulated+0x50/0x50 [ 251.636961] ? lock_acquire+0x16f/0x430 [ 251.640939] ? kvm_check_async_pf_completion+0x2a9/0x410 [ 251.646400] kvm_arch_vcpu_ioctl_run+0x318/0x1000 [ 251.651242] ? kvm_arch_vcpu_ioctl_run+0x318/0x1000 [ 251.656274] kvm_vcpu_ioctl+0x401/0xd10 [ 251.660251] ? kvm_vcpu_block+0xbb0/0xbb0 [ 251.664406] ? save_trace+0x290/0x290 [ 251.668208] ? trace_hardirqs_on_caller+0x400/0x590 [ 251.673226] ? __fget+0x210/0x370 [ 251.676684] ? find_held_lock+0x35/0x130 [ 251.680752] ? __fget+0x210/0x370 [ 251.684211] ? kvm_vcpu_block+0xbb0/0xbb0 [ 251.688362] do_vfs_ioctl+0x7ae/0x1060 [ 251.692257] ? selinux_file_mprotect+0x5d0/0x5d0 [ 251.697017] ? lock_downgrade+0x740/0x740 [ 251.701167] ? ioctl_preallocate+0x1c0/0x1c0 [ 251.705579] ? __fget+0x237/0x370 [ 251.709073] ? security_file_ioctl+0x89/0xb0 [ 251.713485] SyS_ioctl+0x8f/0xc0 [ 251.716848] ? do_vfs_ioctl+0x1060/0x1060 [ 251.721000] do_syscall_64+0x1e8/0x640 [ 251.724924] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 251.729788] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 251.734974] RIP: 0033:0x459a59 [ 251.738169] RSP: 002b:00007ff6d53bdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 251.745882] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 251.753157] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000b [ 251.760430] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 251.767708] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff6d53be6d4 [ 251.774984] R13: 00000000004c2e48 R14: 00000000004d6978 R15: 00000000ffffffff [ 251.782269] ================================================================== [ 251.789629] Disabling lock debugging due to kernel taint [ 251.802956] Kernel panic - not syncing: panic_on_warn set ... [ 251.802956] [ 251.810373] CPU: 0 PID: 11709 Comm: syz-executor.2 Tainted: G B 4.14.147 #0 [ 251.818603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 251.827989] Call Trace: [ 251.830576] dump_stack+0x138/0x197 [ 251.834376] ? kvm_write_guest_virt_system+0x64/0x90 [ 251.839473] panic+0x1f2/0x426 [ 251.842661] ? add_taint.cold+0x16/0x16 [ 251.846628] ? ___preempt_schedule+0x16/0x18 [ 251.851036] kasan_end_report+0x47/0x4f [ 251.855007] kasan_report.cold+0x130/0x2af [ 251.859496] check_memory_region+0x123/0x190 [ 251.863898] memset+0x24/0x40 [ 251.867027] kvm_write_guest_virt_system+0x64/0x90 [ 251.871960] handle_vmread+0x548/0x730 [ 251.875849] ? vmx_deliver_posted_interrupt+0x340/0x340 [ 251.881209] ? __lock_is_held+0xb6/0x140 [ 251.885270] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 251.890713] ? vmx_deliver_posted_interrupt+0x340/0x340 [ 251.896074] vmx_handle_exit+0x20d/0x1330 [ 251.900212] ? vcpu_enter_guest+0xd2d/0x5210 [ 251.904617] vcpu_enter_guest+0xf28/0x5210 [ 251.908844] ? save_trace+0x290/0x290 [ 251.912640] ? __lock_is_held+0x90/0x140 [ 251.916693] ? emulator_read_emulated+0x50/0x50 [ 251.921369] ? lock_acquire+0x16f/0x430 [ 251.925341] ? kvm_check_async_pf_completion+0x2a9/0x410 [ 251.930791] kvm_arch_vcpu_ioctl_run+0x318/0x1000 [ 251.935626] ? kvm_arch_vcpu_ioctl_run+0x318/0x1000 [ 251.940639] kvm_vcpu_ioctl+0x401/0xd10 [ 251.944607] ? kvm_vcpu_block+0xbb0/0xbb0 [ 251.948885] ? save_trace+0x290/0x290 [ 251.952697] ? trace_hardirqs_on_caller+0x400/0x590 [ 251.957711] ? __fget+0x210/0x370 [ 251.961160] ? find_held_lock+0x35/0x130 [ 251.965217] ? __fget+0x210/0x370 [ 251.968684] ? kvm_vcpu_block+0xbb0/0xbb0 [ 251.972842] do_vfs_ioctl+0x7ae/0x1060 [ 251.976733] ? selinux_file_mprotect+0x5d0/0x5d0 [ 251.981493] ? lock_downgrade+0x740/0x740 [ 251.985638] ? ioctl_preallocate+0x1c0/0x1c0 [ 251.990037] ? __fget+0x237/0x370 [ 251.993484] ? security_file_ioctl+0x89/0xb0 [ 251.997893] SyS_ioctl+0x8f/0xc0 [ 252.001258] ? do_vfs_ioctl+0x1060/0x1060 [ 252.005418] do_syscall_64+0x1e8/0x640 [ 252.009298] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 252.014572] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 252.019755] RIP: 0033:0x459a59 [ 252.022937] RSP: 002b:00007ff6d53bdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 252.030651] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 252.037925] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000b [ 252.045194] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 252.052467] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff6d53be6d4 [ 252.059743] R13: 00000000004c2e48 R14: 00000000004d6978 R15: 00000000ffffffff [ 252.068686] Kernel Offset: disabled [ 252.072341] Rebooting in 86400 seconds..