172/0x1f0 [ 555.067152][T25313] should_fail.cold+0xa/0x15 [ 555.067177][T25313] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 555.095493][T25313] ? ___might_sleep+0x163/0x280 [ 555.100363][T25313] __should_failslab+0x121/0x190 [ 555.100392][T25313] should_failslab+0x9/0x14 [ 555.100410][T25313] __kmalloc+0x2dc/0x740 [ 555.100429][T25313] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 555.100452][T25313] ? iter_file_splice_write+0x16e/0xbe0 [ 555.114137][T25313] iter_file_splice_write+0x16e/0xbe0 [ 555.114155][T25313] ? atime_needs_update+0x5f0/0x5f0 [ 555.114176][T25313] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 555.114207][T25313] ? generic_file_splice_read+0x53c/0x800 [ 555.125981][T25313] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 555.126000][T25313] ? add_to_pipe+0x350/0x350 [ 555.126045][T25313] ? rw_verify_area+0x118/0x360 [ 555.126060][T25313] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 555.126084][T25313] direct_splice_actor+0x126/0x1a0 [ 555.142361][T25313] splice_direct_to_actor+0x369/0x970 [ 555.142381][T25313] ? generic_pipe_buf_nosteal+0x10/0x10 07:02:56 executing program 3: bind$bt_l2cap(0xffffffffffffffff, 0x0, 0xffffffffffffff6f) [ 555.142404][T25313] ? do_splice_to+0x190/0x190 [ 555.142428][T25313] ? rw_verify_area+0x118/0x360 [ 555.142447][T25313] do_splice_direct+0x1da/0x2a0 [ 555.142470][T25313] ? splice_direct_to_actor+0x970/0x970 [ 555.154174][T25313] ? rcu_read_lock_sched_held+0x110/0x130 [ 555.154193][T25313] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 555.154211][T25313] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 555.154226][T25313] ? __sb_start_write+0x1ac/0x360 [ 555.154249][T25313] do_sendfile+0x597/0xd00 [ 555.169659][T25313] ? do_compat_pwritev64+0x1c0/0x1c0 [ 555.169686][T25313] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 555.169706][T25313] ? _copy_from_user+0xdd/0x150 [ 555.185728][T25313] __x64_sys_sendfile64+0x15a/0x220 [ 555.200076][T25313] ? __ia32_sys_sendfile+0x230/0x230 [ 555.200095][T25313] ? do_syscall_64+0x26/0x610 [ 555.200113][T25313] ? lockdep_hardirqs_on+0x418/0x5d0 [ 555.200132][T25313] ? trace_hardirqs_on+0x67/0x230 [ 555.200153][T25313] do_syscall_64+0x103/0x610 [ 555.200177][T25313] entry_SYSCALL_64_after_hwframe+0x49/0xbe 07:02:56 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x4005, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0xfffffffffffffffe}, 0x10001}, 0xe) [ 555.216855][T25313] RIP: 0033:0x458079 [ 555.216872][T25313] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 555.216881][T25313] RSP: 002b:00007f407ebccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 555.216897][T25313] RAX: ffffffffffffffda RBX: 00007f407ebccc90 RCX: 0000000000458079 [ 555.216907][T25313] RDX: 0000000020000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 555.216917][T25313] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 555.216927][T25313] R10: 00008080fffffffe R11: 0000000000000246 R12: 00007f407ebcd6d4 [ 555.216935][T25313] R13: 00000000004c4f95 R14: 00000000004d8d08 R15: 0000000000000008 [ 555.230922][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 555.233040][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 555.238245][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 555.244543][ C0] protocol 88fb is buggy, dev hsr_slave_1 07:02:56 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, 0x0, 0xfffffe9e) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x12) ioctl$CAPI_MANUFACTURER_CMD(r1, 0xc0104320, &(0x7f00000001c0)={0x20000000000000, &(0x7f00000000c0)="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"}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2c0, 0x0) connect$rose(r2, &(0x7f0000000240)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, [@null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') sendmsg$FOU_CMD_GET(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40400800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r3, 0x708, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}]}, 0x34}}, 0xc4) [ 555.296094][T25297] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 555.385186][T25297] FAT-fs (loop1): Filesystem has been set read-only [ 555.409951][T25304] hfsplus: unable to find HFS+ superblock 07:02:56 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') exit(0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x8, &(0x7f0000000000)=[{0x6c22, 0x846, 0x3ff, 0x4}, {0x4, 0x7f, 0x100000001, 0x3ff}, {0x2e, 0x9, 0x9, 0x7fffffff}, {0x66, 0x4, 0x10000, 0xaae}, {0x6, 0x6, 0x5}, {0x7d, 0x9, 0x840000000000, 0x8}, {0x4, 0x3, 0x7, 0x8001}, {0x1, 0x5, 0x1, 0x6d7}]}, 0x10) syz_init_net_socket$rose(0xb, 0x5, 0x0) sendfile(r0, r0, 0x0, 0x3) 07:02:56 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x100, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000040)={0x8001007, 0xffffffff80000000, 0x1}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') sendfile(r1, r1, 0x0, 0x3) 07:02:56 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x4000000001, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x5, {0x1000, 0x0, 0x1, 0x3, 0x0, 0x100000000000}, 0x0, 0x4a08}, 0xe) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'yam0\x00', {0x2, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}}) 07:02:56 executing program 1 (fault-call:8 fault-nth:29): syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:02:56 executing program 3: syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x2, 0x40000) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00'}) 07:02:56 executing program 4: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000009c0)={{{@in=@multicast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f0000000ac0)=0xe8) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x1, 0xa, &(0x7f00000008c0)=[{&(0x7f00000000c0)="c4ea5a0fd208891ad54303abbbb87a9555af0a58ffe5b958cee0adc2092b4d59c1012832a0a7c4105727e25dca665e1d843db7d42f0ba4bf1df07544afeaa1b358c62c3fad062cdcc25cef6436ba278c8aae7f228783f116b27328c7892458eb3c023d3deab9862f88e8a698", 0x6c, 0x1}, {&(0x7f0000000200)="8b86b8132d838cbb8d36f4dd46651a2aa92596f6a04c9d590bd513b7c95d648c1f5648efe9f2e975f3f9459352843e66ead04f7c97aba643b3b5fa00b4feecde7128d2efbd34c77e84e92c5f6d2c7e98b4f15c25f6e0cfd0f7496cdca2faf2a2d102e85375216767bf6ed8084118c590eeae45ed72128f98c8402fbb14a8c89423b1e6ba752ec7fef5ca157f5ed83b2ea6b289445ebd4c052cd3d18b32615c40aa50ddf67a3b5854971167e8f890a6aa908ad252d202cff580dfccc4076b132ebbd89aa2c754d8749471abd8a99900581eb69f89e4177e2806b6bc579c8f058a2f60150cc72599883ea393615e988ac182de747a5d", 0xf5, 0x1000}, {&(0x7f0000000140)="d8cd28d042b31f1448ffe3baacc09a08e1ef609eb78f6f4e2cfafb9a71deadcc6632a4ea2d70692dbb0c6da32d89e32b3748b991fae6d1481b89ef", 0x3b, 0x1e}, {&(0x7f0000000300)="36d7d78319fddac2c14aae6285b8270db4eac63c1bc53725", 0x18, 0x400}, {&(0x7f0000000340)="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", 0xff, 0x2}, {&(0x7f0000000440)="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", 0xfb, 0xa00}, {&(0x7f0000000540)="76b7aef66f8f30994df3436c0ab0222fc9ad935d3749ccdcd7c5c9f62e7fe3c1085c3f423feaebfb5a04fb6718a7507192bc10fbcfcacc4e2337ae80a15b0fb27014a1ffb4864c43eaf7f19bb0319309", 0x50, 0x2}, {&(0x7f00000005c0)="a13362909352266037ecbd734d6f14d1fc11ae8755689a8aafc4b3ccab3fb4d5a518d39a1d79e89a28b0c354691919a76506cc82e5794bb0ccfaa21626db93ad3df19a4a804dcd2e0108616e22c59c764a23ee833c34ea9020a92b7bb7ee3a47f5fc4fd354faea7200340621d4f70d09dfb742b82970cd3f30d8dcbdba893e04bd305504178e595f9e515b61f12698e959109151e0fe4237f5811495d012011f47d4db09fe23ca42bdbf67368f056c06714e8a558500096120059523f16d1ceef40af8d97e9141241bd5aa58aa676a0fe9fc19ee93b0", 0xd6, 0x2}, {&(0x7f00000006c0)="53d82f5dde6c170d86f4d38f9b0069b0602f8af500ad3b9dd811e266c2aff4c1e121da44ece524f5f178c79cb259d079a349bf2ec8fc072c4bdce604e534168cef4ee4e53e462804a6eda854a88aabbff474da3292d82a47caa7a088bcfb8c147a413e6832921a3799836a897bfff5ddff62d27ee997bf16caf5c9db4a9ce49a557372f0e87b574e63d5bb9c76a3e2b0735a49bde4219aefdf00773e844c2bde3a1570b40c55de659942b3eba51c10e06611d3e61908f5c93a17d12632b6958f5593", 0xc2, 0x4}, {&(0x7f00000007c0)="b8a0f129efa94f3ae21a52b9b2782f3ac3990adca36fa8ebad4fc1fd65007747634f92ff71531919fb4775bf305e1756457e2244dca00f8997365d43bfef79bc02e264bb531c51a3a8ad3a04a85b25b6dfa8ccf595b1ca6fdad74a016de4ff273961591e71a6635112bb27382f522ea513a8914946b607c2702697f492f335ab2e9eee6124765677db4a3ee93aae41abf75e3a10b8857a89c0c2fe6a4159cca3d95a119d5dfb419bc784295f242ecb682c8d939214041dd2d60405e17a2a113d2a2db598bee953af266f849e6fd1bfe8ee858050434e2264490062917f3e13d77a282801d8b645f7e27b77808e3a58b04a0fae8dbb", 0xf5, 0xfffffffffffffffe}], 0x800, &(0x7f0000000b00)={[{@nobh='nobh'}, {@test_dummy_encryption='test_dummy_encryption'}, {@mblk_io_submit='mblk_io_submit'}, {@acl='acl'}, {@errors_remount='errors=remount-ro'}, {@journal_checksum='journal_checksum'}], [{@subj_user={'subj_user', 0x3d, '$:selinux'}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x31, 0x37, 0x77, 0x7f, 0x35, 0x36, 0x38], 0x2d, [0x66, 0x34, 0x3b, 0x33], 0x2d, [0x7f, 0x77, 0x39, 0x77], 0x2d, [0x77, 0x33, 0x65, 0x31], 0x2d, [0x33, 0x3f, 0x39, 0x77, 0x3d, 0x77, 0x37, 0x67]}}}, {@pcr={'pcr', 0x3d, 0xe}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@euid_lt={'euid<', r0}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fsname={'fsname', 0x3d, 'hfsplus\x00'}}]}) syz_mount_image$hfsplus(&(0x7f0000000180)='hfsplus\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x4) [ 555.878269][T25341] Unknown ioctl 1075861083 07:02:57 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {}, 0x10001}, 0xe) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0x2b, "f881d1b3daa66a2480b21bf8c16dd296f13f1680d56bf9104edc331d6495616d437bf37050fd1c6492e36f"}, &(0x7f00000000c0)=0x33) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={r2, 0x8}, 0x8) lookup_dcookie(0x7, &(0x7f0000000140)=""/134, 0x86) 07:02:57 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) [ 555.925113][T25343] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 07:02:57 executing program 3: syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e21, 0x400, @ipv4={[], [], @remote}, 0x2}], 0x3c) bind$bt_l2cap(r0, 0x0, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="3403bee7ae15a3cd57c3d5fd0f88f400701d9043b33fcf4d88420af5aa77e87a57ece1e7674840faf6623ee185c7ee1bf9e8b5672ed870374ce8dff77bfd39792241f437049e0000000000000000000000000000"], 0x63, 0x1) [ 556.024675][T25353] hfsplus: unable to find HFS+ superblock [ 556.026971][T25355] FAULT_INJECTION: forcing a failure. [ 556.026971][T25355] name failslab, interval 1, probability 0, space 0, times 0 07:02:57 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000180)={0x4}) sendfile(r0, r0, 0x0, 0x3) signalfd(r0, &(0x7f0000000140)={0x16d5b361}, 0x8) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x2}, 0x28, 0x2) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @reserved}, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x101000, 0x0) recvfrom$rose(r0, &(0x7f00000001c0)=""/36, 0x24, 0x2, &(0x7f0000000200)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x40) [ 556.111372][T25355] CPU: 1 PID: 25355 Comm: syz-executor.1 Not tainted 5.1.0-rc1-next-20190321 #8 [ 556.120440][T25355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 556.130502][T25355] Call Trace: [ 556.133808][T25355] dump_stack+0x172/0x1f0 [ 556.138148][T25355] should_fail.cold+0xa/0x15 [ 556.142774][T25355] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 556.148602][T25355] ? ___might_sleep+0x163/0x280 [ 556.153478][T25355] __should_failslab+0x121/0x190 [ 556.158431][T25355] should_failslab+0x9/0x14 [ 556.162959][T25355] __kmalloc+0x2dc/0x740 [ 556.167239][T25355] ? retint_kernel+0x2d/0x2d [ 556.171848][T25355] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 556.177579][T25355] ? atime_needs_update+0x491/0x5f0 [ 556.182785][T25355] ? iter_file_splice_write+0x16e/0xbe0 [ 556.188359][T25355] iter_file_splice_write+0x16e/0xbe0 [ 556.193745][T25355] ? atime_needs_update+0x5f0/0x5f0 [ 556.198971][T25355] ? generic_file_splice_read+0x53c/0x800 [ 556.204700][T25355] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 556.210692][T25355] ? add_to_pipe+0x350/0x350 [ 556.215314][T25355] ? rw_verify_area+0x118/0x360 [ 556.220170][T25355] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 556.226159][T25355] direct_splice_actor+0x126/0x1a0 [ 556.231306][T25355] splice_direct_to_actor+0x369/0x970 [ 556.236691][T25355] ? generic_pipe_buf_nosteal+0x10/0x10 [ 556.242244][T25355] ? do_splice_to+0x190/0x190 [ 556.242267][T25355] ? rw_verify_area+0x118/0x360 [ 556.242299][T25355] do_splice_direct+0x1da/0x2a0 07:02:57 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_adj\x00') sendfile(r0, r0, 0x0, 0x3) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000000)={0x6, 0xf000}) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 07:02:57 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000080)='\xf2\xafey\x81\xd7\xad.g^u\x81\xb9\x13\xf2\xdc\x9bY\x1c9A\xea\x87D*\xba\xeb\xb3\x15\x9e7@\xa1\x7f\xc7\x9e\xcbh\xce\xfd\x15\xabVg\xc7\xc6\xad\x1b\x93\xf9\xfe\xd6\x93Yz\x05\xaeb\x94\xf79<5\xab*\x94!\x86{\xabpjo\xe7\xdfy', 0xffffffffffffffff}, 0x3db) getpgid(r0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x2a6103, 0x0) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f00000001c0)) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x9, 0x2040) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, &(0x7f0000000140)=0x1, 0x4) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000100)) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, 0x0, 0x0) [ 556.242318][T25355] ? splice_direct_to_actor+0x970/0x970 [ 556.242342][T25355] ? rcu_read_lock_sched_held+0x110/0x130 [ 556.251876][T25355] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 556.251894][T25355] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 556.251910][T25355] ? __sb_start_write+0x1ac/0x360 [ 556.251941][T25355] do_sendfile+0x597/0xd00 [ 556.251989][T25355] ? do_compat_pwritev64+0x1c0/0x1c0 [ 556.262377][T25355] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 556.262393][T25355] ? _copy_from_user+0xdd/0x150 [ 556.262413][T25355] __x64_sys_sendfile64+0x15a/0x220 [ 556.262429][T25355] ? __ia32_sys_sendfile+0x230/0x230 [ 556.262444][T25355] ? do_syscall_64+0x26/0x610 [ 556.262466][T25355] ? lockdep_hardirqs_on+0x418/0x5d0 [ 556.273634][T25355] ? trace_hardirqs_on+0x67/0x230 [ 556.273657][T25355] do_syscall_64+0x103/0x610 [ 556.273681][T25355] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 556.273693][T25355] RIP: 0033:0x458079 [ 556.273713][T25355] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 556.284948][T25355] RSP: 002b:00007f407ebccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 556.284963][T25355] RAX: ffffffffffffffda RBX: 00007f407ebccc90 RCX: 0000000000458079 [ 556.284972][T25355] RDX: 0000000020000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 556.284980][T25355] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 556.284989][T25355] R10: 00008080fffffffe R11: 0000000000000246 R12: 00007f407ebcd6d4 [ 556.284998][T25355] R13: 00000000004c4f95 R14: 00000000004d8d08 R15: 0000000000000008 07:02:57 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') exit(0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x82001, 0x0) sendfile(r0, r0, 0x0, 0x3) 07:02:57 executing program 4: syz_mount_image$hfsplus(&(0x7f0000000180)='hfsplus\x00', &(0x7f00000001c0)='./file0\x00', 0x4, 0x0, 0x0, 0x2, 0x0) 07:02:57 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) signalfd4(r0, &(0x7f0000000080)={0x4}, 0x8, 0x80000) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {}, 0x10001}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) 07:02:57 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)=0x5) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') sendfile(r1, r1, 0x0, 0x8000000000005) 07:02:57 executing program 1 (fault-call:8 fault-nth:30): syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:02:57 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0xfffffffffffffda6) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffa, 0x0, 0xff, 0x91b, 0xffffffffffffffff, 0x3, 0x3f, 0x4, 0x277, 0x40, 0x38c, 0x3ff, 0x8, 0x38, 0x2, 0x14, 0x8000, 0xfffffffffffffffe}, [{0x60000000, 0x8, 0x963, 0xb75, 0x7, 0x7, 0x20}, {0x6, 0x36, 0x5, 0x1f, 0x8950, 0x2, 0xffffffffffffffe1, 0x1}], "db858efb0d316499339926c81bcabc7873f122bd36e5023f16b883556e2779f0e1a6da0f18d3d361fa2f7d4500bbdadd916fd2bd3995e86d2ef66d9a1c", [[], [], [], [], [], [], []]}, 0x7ed) 07:02:57 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000080)='oom_adj\x00') getpid() sendfile(r1, r1, 0x0, 0x3) [ 556.847387][T25395] hfsplus: unable to find HFS+ superblock 07:02:58 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {}, 0x10001, 0x800}, 0xe) listen(r0, 0x8) 07:02:58 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1000005, 0x0) r1 = dup2(r0, r0) setsockopt$inet_mreq(r1, 0x0, 0x27, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x9, 0x0}, @empty}, 0x8) r2 = shmget(0x0, 0x4000, 0x813, &(0x7f0000ff9000/0x4000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000040)=""/13) ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f0000000100)) bind$bt_l2cap(r0, 0x0, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffff9c, 0x40b, &(0x7f0000000000)) 07:02:58 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x8, &(0x7f00000001c0)='oom_adj\x00', 0xffffffffffffffff}, 0x30) r1 = syz_open_procfs(r0, &(0x7f0000000180)='net/fib_trie\x00') ioctl$CAPI_GET_FLAGS(r1, 0x80044323, &(0x7f0000000040)) sendfile(r1, r1, 0x0, 0x3) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@local, @loopback}, 0x8) [ 556.952345][T25395] hfsplus: unable to find HFS+ superblock [ 556.980065][T25399] FAULT_INJECTION: forcing a failure. [ 556.980065][T25399] name failslab, interval 1, probability 0, space 0, times 0 07:02:58 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {}, 0x10001}, 0xe) [ 557.045392][T25399] CPU: 1 PID: 25399 Comm: syz-executor.1 Not tainted 5.1.0-rc1-next-20190321 #8 [ 557.054463][T25399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 557.064535][T25399] Call Trace: [ 557.067846][T25399] dump_stack+0x172/0x1f0 [ 557.072202][T25399] should_fail.cold+0xa/0x15 [ 557.076808][T25399] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 557.082635][T25399] ? ___might_sleep+0x163/0x280 [ 557.087536][T25399] __should_failslab+0x121/0x190 [ 557.092483][T25399] should_failslab+0x9/0x14 [ 557.097003][T25399] __kmalloc+0x2dc/0x740 [ 557.101263][T25399] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 557.106992][T25399] ? atime_needs_update+0x491/0x5f0 [ 557.112218][T25399] ? iter_file_splice_write+0x16e/0xbe0 [ 557.117773][T25399] iter_file_splice_write+0x16e/0xbe0 [ 557.123153][T25399] ? atime_needs_update+0x5f0/0x5f0 [ 557.128420][T25399] ? generic_file_splice_read+0x53c/0x800 [ 557.134147][T25399] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 557.134165][T25399] ? add_to_pipe+0x350/0x350 07:02:58 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x5, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000200)={{0xa, 0x5, 0x0, 0x3ff, 'syz0\x00'}, 0x1, [0x5, 0x8, 0x1, 0x200, 0x100000001, 0x6, 0x4797, 0x4, 0x40, 0x1ff, 0xff, 0x800000000, 0x8, 0x15, 0x5, 0x40, 0x6, 0x685, 0x80, 0x1ff, 0xed, 0x3, 0x3, 0x10001, 0x3, 0x8afd41c, 0x100, 0x3ff, 0x100000001, 0x0, 0x8, 0x5, 0xf0, 0x3, 0x2, 0x3, 0x6, 0xffffffff, 0x10001, 0x7, 0x20, 0x5, 0x1ff, 0x6, 0x5, 0xffffffffffffff81, 0x10001, 0x1cd9, 0x5, 0x3, 0x80, 0x0, 0x3, 0xd6f, 0x0, 0x5, 0x9, 0x1, 0x2, 0x1f, 0x6e, 0x3, 0x8, 0x2, 0x3, 0x2, 0x7817, 0x3, 0x37345fb3, 0x5c0e, 0x9, 0x3, 0x7, 0xcf, 0x9, 0x70000000000, 0x7fff, 0x20, 0x10001, 0xfffffffffffffff7, 0xffff, 0xef, 0x40, 0x800, 0xb9c, 0x400, 0x0, 0xfff, 0x3, 0x7, 0xffffffffffffffff, 0x3, 0x9, 0x7fff, 0x3, 0xffffffff, 0x200, 0x1, 0x3, 0xffffffff, 0x14d, 0x7fffffff, 0x9, 0x10000, 0x10000, 0x9, 0x81, 0x7f, 0x1, 0x3ff, 0x1, 0x4, 0x100000001, 0xf39, 0x0, 0x1a, 0x7, 0x7, 0x7ff, 0x20, 0x9, 0x9, 0x5bc0, 0xfff, 0x1, 0x7, 0x40, 0x4]}) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) write$evdev(r0, &(0x7f0000000b80)=[{{0x77359400}, 0x0, 0xe5, 0x101}, {{}, 0x17, 0x3, 0x7fff}, {{0x77359400}, 0x3, 0x8, 0x3}, {{0x77359400}, 0x1f, 0x4, 0x20}, {{}, 0x17, 0x3, 0x7}], 0x78) syz_mount_image$hfsplus(&(0x7f0000000180)='hfsplus\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fstat(r0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$btrfs(&(0x7f0000000040)='btrfs\x00', &(0x7f0000000080)='./file0\x00', 0x4, 0x4, &(0x7f00000009c0)=[{&(0x7f00000000c0)="3c66beda3b80526d1276d5c5da65f27884500f907b396a3ef230d854bad9a79c0f4a2be6851f2fc11ee97094f2132736a2fc724c7930b930a5cf7fc2b226d2ec4f99471bcfe1ab8a9620db313d317c7293281780447aaca1cced3eae61922fef4e5157d5682bc82807318be0f2e720831035c45803156c61215502c3fc4a96f8136b8b77df2a1c6b8195aaed", 0x8c, 0xffffffff}, {&(0x7f0000000700)="156bdba09a0ba4f68fdee47b26083426d06b4eb113b363ce23d6769c33f0e13344078012a1687244d429cf7e4ed8b57f58e5b4bcb1360c4b75c63d48cd22d5ca433bac8efcf8dca8ecb33d36479a5ef0e8de32b61cc1870b74966e0c911841ca89dfead0f912a4d82c06cafb8dbe534b4def229b863635852cac08567ce74919a61b0b7bd2e1efee7dbedf20746f43110a5242dcb1c9a284cc79f3fe6c42775f0b36277365681848968e7543492e8171eedf48f64c9c1eb42e9c83e433569e69130434ec001e8ea9ff0d9de54202f407dd12bb0213", 0xd5}, {&(0x7f0000000800)="64cf4f05166b661d0d37592f6809bf3e2b1e4f0ac87b5c8254a03425f97c93fc8fd9ba6337d47b342b2f7219622bf8022df30880d3544788189a971131f15d4568152adde1ccd186aa7524f84ddacf5521a37de3b24fd3e3937fe38145dd35af23f59ca4ea6fccf90a06ba9b152f1f76bc1be688277ebfdb1191c8d0372ab5ea352a1cf449cd997286b0c3a41e1f948eb24e0cf4eafec765216d65f911b2b7788775dc6c8d47fa57b24940ea1c3889a6f33d2861da17f9a19f1a5f403b7b9387d412ba3d2740c9019dc3850d13ef865409fcc900bad4d7249fb88a940d", 0xdd, 0x80000000}, {&(0x7f0000000900)="e5f415ccab1922bad9eaa20d921ebb8117abc1c5f8f39c7892eef4d37d2e711b04ebda6780a37228d5e3094a546e35d789508ea22a6c579fabbcb0789780c4f9212b0116525bf8e6cc2d44aba99b0ec26a9b105d6da396d5bf2019ad38832c752034c7c6fb29402040ae9c3d7d56a60ad303118b680b19d1ea051979a69350137129e6577c2d173ef0a03b9bd5c7c056f061a4f70ddf95f93cc423e4f1fbf4031f59e6b58858af1ba5dcf2", 0xab, 0x5}], 0x0, &(0x7f0000000ac0)={[{@max_inline={'max_inline', 0x3d, [0x32, 0x7f, 0x0, 0x70, 0x77, 0x0]}}, {@thread_pool={'thread_pool', 0x3d, 0x8000}}, {@compress_force_algo={'compress-force', 0x3d, 'zlib'}}], [{@obj_type={'obj_type', 0x3d, 'syz0\x00'}}, {@measure='measure'}, {@fowner_gt={'fowner>', r1}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@appraise='appraise'}]}) [ 557.134182][T25399] ? retint_kernel+0x2d/0x2d [ 557.134230][T25399] ? rw_verify_area+0x118/0x360 [ 557.134253][T25399] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 557.144815][T25399] direct_splice_actor+0x126/0x1a0 [ 557.144836][T25399] splice_direct_to_actor+0x369/0x970 [ 557.144857][T25399] ? generic_pipe_buf_nosteal+0x10/0x10 [ 557.144880][T25399] ? do_splice_to+0x190/0x190 [ 557.144902][T25399] ? rw_verify_area+0x118/0x360 [ 557.144922][T25399] do_splice_direct+0x1da/0x2a0 [ 557.144944][T25399] ? splice_direct_to_actor+0x970/0x970 [ 557.154393][T25399] ? rcu_read_lock_sched_held+0x110/0x130 [ 557.154410][T25399] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 557.154427][T25399] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 557.154442][T25399] ? __sb_start_write+0x1ac/0x360 [ 557.154463][T25399] do_sendfile+0x597/0xd00 [ 557.154499][T25399] ? do_compat_pwritev64+0x1c0/0x1c0 [ 557.154522][T25399] ? copy_user_generic_unrolled+0x89/0xc0 [ 557.165626][T25399] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 557.165641][T25399] ? _copy_from_user+0xdd/0x150 [ 557.165659][T25399] __x64_sys_sendfile64+0x15a/0x220 [ 557.165677][T25399] ? __ia32_sys_sendfile+0x230/0x230 [ 557.165693][T25399] ? do_syscall_64+0x26/0x610 [ 557.165711][T25399] ? lockdep_hardirqs_on+0x418/0x5d0 [ 557.165727][T25399] ? trace_hardirqs_on+0x67/0x230 [ 557.165749][T25399] do_syscall_64+0x103/0x610 [ 557.176655][T25399] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 557.176668][T25399] RIP: 0033:0x458079 [ 557.176685][T25399] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 557.176693][T25399] RSP: 002b:00007f407ebccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 557.176709][T25399] RAX: ffffffffffffffda RBX: 00007f407ebccc90 RCX: 0000000000458079 [ 557.176719][T25399] RDX: 0000000020000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 557.176728][T25399] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 557.176737][T25399] R10: 00008080fffffffe R11: 0000000000000246 R12: 00007f407ebcd6d4 [ 557.176746][T25399] R13: 00000000004c4f95 R14: 00000000004d8d08 R15: 0000000000000008 [ 557.399331][T25419] hfsplus: unable to find HFS+ superblock [ 557.473703][T25419] hfsplus: unable to find HFS+ superblock 07:02:58 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') exit(0x0) sendfile(r0, r0, 0x0, 0x3) 07:02:58 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x800, 0xfffffffffffffffe}, 0x10001}, 0xfffffffffffffe5f) 07:02:58 executing program 3: r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @reserved}, 0x10, 0x800) signalfd4(r0, &(0x7f0000000040), 0x8, 0x80000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x6, 0x0) bind$bt_l2cap(r1, 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x1, 0x0) ioctl$sock_ax25_SIOCDELRT(r2, 0x890c, &(0x7f00000000c0)={@null, @null, 0x8, [@default, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default]}) 07:02:58 executing program 1 (fault-call:8 fault-nth:31): syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:02:58 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x201, 0x0) bind(r0, &(0x7f00000000c0)=@rc={0x1f, {0x1, 0x0, 0x64a, 0xff, 0x5, 0x2}, 0x4}, 0x80) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000280)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000240)='comm\x00Dk\xf5%UK\xab\xb9\x87\xbb\xe7J\'C\x00 \x1bk1\x7fx\x81\x12u\xb7\x91Hcp\xde\x9eo\xb8\xe3\xc7\xa6\xa7\x90\xe1\x18\t\x00\x1d\xcd52\xbd\xca\x96\x17\xbc\x1bC\xb1\xd6T') sendfile(r2, r2, 0x0, 0x3) 07:02:58 executing program 4: setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x2) syz_mount_image$f2fs(&(0x7f00000000c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x80, 0x4, &(0x7f0000000380)=[{&(0x7f0000000200)="846f0fac96c6c91b7d75a9ab3a7f7af5ff0d9b3c8b1c9116116f0b8dfc69b82c65c4503c8b37f37ec7b94a0c610ef11d4733b8311e292349e2ccc14beade6cfd7734a0ce4fa4e9b115f616589054fbede1dfa41e3b0fb1475aaae5d0d13d73af5130eb5c62b687624d", 0x69, 0x7}, {&(0x7f0000000140)="274c6fb6cb7d9686c9ed1a3710ae657a3eb151a70ac53e9c3da36951502292945853cb494bf9b56b346f1050d10493fb4d014f32689c05edf1eff14602", 0x3d, 0x8}, {&(0x7f0000000280)="b5957a3b8aff3ca2bb303eef8064337c80eaa8433bf86089c57b6f2192bc314500043b7339ed3cd0666d0d1601d03eb8ee7031b392a3e54422aed5a03c26319ad4519b7a3504b0c5bc", 0x49, 0x5}, {&(0x7f0000000300)="5db68365d71271c095c08fbce9486830d898dd1c76755c75d87e2a23910dcf06d89b79ffbaa844caae1517f0af923a707153fdefa707da8abafd4b6f73ee3d8c3430b48b55fc9eab510357", 0x4b, 0x5}], 0x1, &(0x7f0000000400)={[{@nodiscard='nodiscard'}, {@discard='discard'}, {@background_gc_sync='background_gc=sync'}, {@noheap='noheap'}, {@quota='quota'}, {@four_active_logs='active_logs=4'}], [{@subj_type={'subj_type', 0x3d, ',!'}}, {@dont_measure='dont_measure'}]}) syz_mount_image$hfsplus(&(0x7f0000000180)='hfsplus\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 557.780557][T25432] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 557.814888][T25432] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 557.825745][T25428] FAULT_INJECTION: forcing a failure. 07:02:58 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x40) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') sendfile(r0, r0, 0x0, 0x3) 07:02:58 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {}, 0x10001}, 0xe) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x101101, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x9c}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000002c0)={r2}, 0x8) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(r0, &(0x7f0000000300)={0xae, 0x1, "d091d517bb07b252caad95a22953df88460abaa39a21a922798b013719981b299dee5276d1e939666e19c8fa9f2995e97ba71cc1de894e3d993afd6ae47e6393ef3b5bdfbe502695b573e390718fede002d7ebe78313792c4d56d0443af6f5f1059eec876f6f2a836b7de55ab5b0818b4af2f61e0a7737379fbde0602232fb066563b9f5eb3556aea91059de2b951695b810b420cce63ba84a3a6a4a09c52543098ccda7e608"}, 0x400) lchown(&(0x7f0000000000)='./file0\x00', r3, r4) 07:02:58 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0xfffffffffffffe22) [ 557.825745][T25428] name failslab, interval 1, probability 0, space 0, times 0 [ 557.873459][T25428] CPU: 0 PID: 25428 Comm: syz-executor.1 Not tainted 5.1.0-rc1-next-20190321 #8 [ 557.882563][T25428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 557.892628][T25428] Call Trace: [ 557.895933][T25428] dump_stack+0x172/0x1f0 [ 557.900322][T25428] should_fail.cold+0xa/0x15 [ 557.904923][T25428] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 557.910744][T25428] ? ___might_sleep+0x163/0x280 [ 557.915606][T25428] __should_failslab+0x121/0x190 [ 557.920562][T25428] should_failslab+0x9/0x14 [ 557.925075][T25428] __kmalloc+0x2dc/0x740 [ 557.929353][T25428] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 557.935619][T25428] ? iter_file_splice_write+0x16e/0xbe0 [ 557.941204][T25428] iter_file_splice_write+0x16e/0xbe0 [ 557.946611][T25428] ? atime_needs_update+0x5f0/0x5f0 [ 557.951835][T25428] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 557.957574][T25428] ? mark_held_locks+0xa4/0xf0 [ 557.962356][T25428] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 557.967829][T25428] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 557.973323][T25428] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 557.979316][T25428] ? retint_kernel+0x2d/0x2d [ 557.983919][T25428] ? trace_hardirqs_on_caller+0x6a/0x220 [ 557.989580][T25428] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 557.995052][T25428] ? retint_kernel+0x2d/0x2d [ 557.999654][T25428] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 558.005655][T25428] direct_splice_actor+0x126/0x1a0 [ 558.010803][T25428] splice_direct_to_actor+0x369/0x970 [ 558.016201][T25428] ? generic_pipe_buf_nosteal+0x10/0x10 [ 558.021775][T25428] ? do_splice_to+0x190/0x190 [ 558.026462][T25428] ? rw_verify_area+0x118/0x360 [ 558.031326][T25428] do_splice_direct+0x1da/0x2a0 [ 558.036194][T25428] ? splice_direct_to_actor+0x970/0x970 [ 558.041775][T25428] ? rcu_read_lock_sched_held+0x110/0x130 [ 558.047573][T25428] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 558.053045][T25428] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 558.059290][T25428] ? __sb_start_write+0x1ac/0x360 [ 558.064327][T25428] do_sendfile+0x597/0xd00 [ 558.068763][T25428] ? do_compat_pwritev64+0x1c0/0x1c0 [ 558.074078][T25428] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 558.080322][T25428] ? _copy_from_user+0xdd/0x150 [ 558.081114][T25432] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 558.085181][T25428] __x64_sys_sendfile64+0x15a/0x220 [ 558.085200][T25428] ? __ia32_sys_sendfile+0x230/0x230 [ 558.085217][T25428] ? do_syscall_64+0x26/0x610 [ 558.085235][T25428] ? lockdep_hardirqs_on+0x418/0x5d0 [ 558.085253][T25428] ? trace_hardirqs_on+0x67/0x230 [ 558.085274][T25428] do_syscall_64+0x103/0x610 [ 558.122981][T25428] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 558.128873][T25428] RIP: 0033:0x458079 [ 558.132772][T25428] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 558.152382][T25428] RSP: 002b:00007f407ebedc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 558.160795][T25428] RAX: ffffffffffffffda RBX: 00007f407ebedc90 RCX: 0000000000458079 07:02:59 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080)=0x7fffffff, r2, 0x0, 0x0, 0x1}}, 0x20) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {}, 0x10001}, 0xe) 07:02:59 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r2, 0x301, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc8}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x81}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8800) 07:02:59 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') sendfile(r0, r0, 0x0, 0x3) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0xec, "9eb8ff46eff65a5cd7ed5b871769c173136299743181700fd3efa8e025b0d103a1e909709298153a846acfa65cc2d3a0ae942f231c256f23243361bad50c1ea7375190a3ef6251850071aae51a2bbb9605176a870c2c1b1bfbde965efb3e1e711395fc580ddbc96cbe90435e076b1a90c968210666043ab0f2e132b524046e679ff907c7850c23d21416ec64fdb27ee1f289534caa79c8ffd3c2369b20941f9580368163c43fcd2a4097fa1c3d62fa7d24426bda356518be660ea466c5686bcca09a8b634d79d33f79eb6c8e1b40a5bbc3869b6385b922be939c971365e05d68fac078eec6badf159227909f"}, &(0x7f0000000000)=0xf4) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x1, 0xdc20, 0x1, 0x0, 0x7ff, 0x80000001, 0x7fff, 0x8, r1}, 0x20) [ 558.168771][T25428] RDX: 0000000020000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 558.174557][T25432] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 558.176746][T25428] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 558.176757][T25428] R10: 00008080fffffffe R11: 0000000000000246 R12: 00007f407ebee6d4 [ 558.176767][T25428] R13: 00000000004c4f95 R14: 00000000004d8d08 R15: 0000000000000006 [ 558.194742][T25427] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 558.299892][T25441] hfsplus: unable to find HFS+ superblock [ 558.332499][T25427] FAT-fs (loop1): Filesystem has been set read-only 07:02:59 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x200440000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000540)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@local}}, &(0x7f0000000640)=0xe8) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000680)={r1, 0x3, 0x3, 0x14, 0x3f, 0x5, 0xfffffffffffff90a}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x44000, 0x0) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, &(0x7f0000000040)) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000140)=0x0) syz_open_procfs(r3, &(0x7f00000001c0)='oomOscore\x00') 07:02:59 executing program 2: mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000, 0x10000003, &(0x7f0000ffb000/0x1000)=nil) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {}, 0x10001}, 0xe) 07:02:59 executing program 5: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2080c0, 0xa5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000010c0)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000000c0)="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", 0x1000, r0}, 0x68) r1 = getpgid(0x0) r2 = syz_open_procfs(r1, &(0x7f0000001140)='oom_adj\x00') sendfile(r2, r2, 0x0, 0x3) 07:02:59 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x50400, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000080)={0x0, 0x10001, 0xfffffffffffffffa, [], &(0x7f0000000040)=0xfffffffeffffffff}) 07:02:59 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x9, 0x220400) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000040)=0xff) 07:02:59 executing program 1 (fault-call:8 fault-nth:32): syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:02:59 executing program 4: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)="297b05426009d84db72e39fad6d0fba67e6635a5e1af78b12b4f8d4bff184d263959344f3a983ba27b22e529451e7e4b80e6ba28bdda295189cf87c7526bd707e2879932fed5b73a165c6e26d1de54b580f37a414955589ea0b8a89d6df226755c603fe031507e71923a806d6cdcffcdd124cb05457ab1a46be48f7797e0d82f38e98f0335fb656d6f9b6f5d6ad5aec2756cdc829f73ded8c25179db88d86f8673c1eede50dec1b112f6192f317da08b4d208729fb82bf41a9c7", 0xba}, {&(0x7f00000000c0)='\bx+vs', 0x5}, {&(0x7f0000000200)="b80217873b4ae22e916db46c8db91b6c096d07fa896ee6edb914ed528f40676dc9d0dfa72013f507b69bce1b491fcd5246ebacb06666c4b08ecc892662c7682b48323cc5008437506692e81fa3bab79408139d8b536cdd6328211d3912be89712bfa72679784fc5b50e951ba34a6359f6d01d7a86914d41a8b21ec64985cc6f00790bfccc55a8704f5260846d108fd667a56a1e2599767875ba4cf25a18636738e565cda14f295da3d5893827261101fea3fefa245cd2352b0feaea27260f237df4e033fe51a94275d9cdf1e0a43076f81581bf0d47281ce2b6b6e51315625ebd04c", 0xe2}, {&(0x7f0000000300)="c7ee37feb0eeb19652fcae57b65c2b11b1c174fc2bb6a23dd019636cf3123f996f3ba38fc37676e6e786c76fec33cb13914680dae2700c7f1d80647e01a40360689b1bf4b2e0dd2444e29d024ab0e666470399294a8fef80f465015dfb3419bf2162dbcd1322d97d8c4e4c19ac23a3da6dcaba2766222a076ff4d5f719ecf67b29cd61fd7fc37cc1db691e4221d32bb1b969c6ecf7831f579b91be949604f071a2f93dbcac458c8054ef2cb036097a16fb88093db04f834c1468073ec80dd01c536d37820222355b4768e5ec4082ac675ff2ad276492edb7c19ca85a8cbb", 0xde}, {&(0x7f0000000100)="1242d1fb7f945d9b1dcc6031d8d2c6ad6d00ff657f66b73c41dd26bc6e785efb446022e1ec62cb739f7a436fec2f5d7c35e05d730d4ff177844d2dc84997ac7e1d9d73c9fdda6e43159314105ff7cf10061b7bbefb5f06ea1d812ddc5cce3a70fc1c2e9c57dde901bdf44356c3f5", 0x6e}, {&(0x7f0000000400)="738b7b25a2cc0395c15fb45ca6ff9579803ab498b076a9efe8c19fa5fb4c89266b53f98a9571076f064f30335feebc9c5b28dcd2b0e323dbfd43ff14766562168675ebd252bd284832ee21c8f43fa6c02062ba13cc3e24eed7aa41466a563553870945d2a853e97f385fecfc09ff4d4bee9b25d0f33e04a9701adc54613cf9b79559a03b35f4e4b994e05ea7193064bb4297791ec694ed600aaa323524265c899e63bd6018f1248c255d20fd9d2c4db2632607ab516eb5a3bc33c89ec810c683a005f1068ee801e72ed0a0490021f3567239f1f680b101966e8c1d6b8f64d0d1cd9c216c6f3b607bf5e218504512643764", 0xf1}], 0x6, &(0x7f0000000580)=[{0x50, 0x103, 0xffffffffffffffc1, "27889ded89330eed8d40ba0ca2bd6b72ef24792dbcf4c8b2ec77bcdf6e57c10976acf056d680900d5bdbd3de3e6a882cb62fca6f707df8cfdef383fb46f1"}, {0xf8, 0x107, 0x2ba49e27, "0374df007d0b3956c8f6979fc64a7c9e082f3b4340e96af2aa93c0a4254cd3de5a068bb910219a2b1f5034a13698e48390d777c9087254be50d76332d9a08a07d2cf8b095ab4151c1dfc105d03fbb5b48a59d29a2ba7391a99756225acf5a0ae22a6c71f9a454ba94ae06ce1503c5c679a1398b556f013768bf765d7bce1844099bb1c7dfd06a2272761d550e7d36e524cb06013a17ed6ccdfae424daaf1fb482ef3fe7712a3c81bb6ca0a592ddb26baea17f27f6436c937c19443e5eb7f5a49c02c2c851c600974ffb9fcd38830fc2de9691ef24cd06332c81e337816dfb5c1538ced745e7c3f"}, {0x1010, 0x1, 0xffffffff, "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"}, {0x1010, 0x102, 0x8, "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"}, {0xf0, 0x119, 0x3, "079d329ca063ff8ec66020b7e6191abdb7fa727574bf918b441855fa6b83dcb2d1b04b260e0eb164843377a799d3e0386a0044eb5145bf6da36356ab2de6329a2276967cf85a7db84026e73f35cf8c66c35b2ad558f3ddf9e38e7c1ae59a39109d9b8626b6e99a465406c05c59bca0ba6b651299d328dac316411b2593a7ac162ae51c1b1064dda12a2357524eb103eed2bdab4be9c8deb5e73739ae62399906a6ed36dc9151b52433ab2407936f4351ab56585bd5e821e5e90f87a2b3bd97fade30c93e8c578b4224edf08ac4470cfff8b28c1acafe5bb57e2481e8c6e072"}, {0xf8, 0x11b, 0x100, "3cd629cc348891a960f98137aa1f721a04ee96534a06b29201fadedda3acc1a6266a3d0cb4f037912e2a89554b2b8ca0b48be98e329d867c5e189f379784eace77cff8676ef487963201ccc8badc6797b96445d93fdab4d61133139cda117299683f897ba4afbed85b46958e89dfc461f28a50c6856e18fe678b87e0b04e154c640eb119eb2254547aa9c0f0a7cd05da25699599f847d0744457fedee72102071a4ea6d53e18437a3fe03f30f3c55d3502354a31c185ea9f99069ab6c312e992f2e7a06b49025d3f69387f665a054981c9fe0b81c63609cd4407081fead9f488e3719290"}, {0x88, 0x103, 0x0, "6e6179691cbce5229d09191229f89968c2f052cc4b3edef318abdc35d010053c7bb8bce57cc0cbd71dc16e95d416e1698e8cf1264fe5e2a616e160de16b502e700ae213e17b539cdb8693eaa1199c485ab89131f7cf957180d55cf2e52fbd0b350c2f0e7d7f8e7a31af0169510c39735c6faec37"}], 0x23d8}, 0x8001) syz_mount_image$hfsplus(&(0x7f0000000180)='hfsplus\x00', &(0x7f0000002a00)='./file0\x00', 0x100000000000000, 0x0, 0x0, 0x0, 0x0) 07:02:59 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r1, 0x4000100) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000080)='syz', &(0x7f00000000c0)) 07:02:59 executing program 2: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x5, 0xfffffffffffffffe) r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x2, 0x2) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xfffffffffffffffe, {0x0, 0x0, 0x1f, 0x4}, 0x10001}, 0xe) 07:02:59 executing program 0: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') exit(0x0) sendfile(r1, r1, 0x0, 0x3) 07:02:59 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') sendfile(r0, r0, 0x0, 0x3) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x9, 0x0, [], [{0x5, 0x9b, 0x1, 0x8, 0xffffffffffff0000, 0x7}, {0x1ff, 0x7, 0x0, 0x3, 0xb026, 0x7}], [[], [], [], [], [], [], [], [], []]}) 07:03:00 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') sendfile(r0, r0, 0x0, 0x3) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000040)={0x8, 0x3, 0x516ad966, 0x40}) [ 558.963684][T25481] FAULT_INJECTION: forcing a failure. [ 558.963684][T25481] name failslab, interval 1, probability 0, space 0, times 0 [ 558.988620][T25489] hfsplus: unable to find HFS+ superblock [ 559.028384][T25481] CPU: 1 PID: 25481 Comm: syz-executor.1 Not tainted 5.1.0-rc1-next-20190321 #8 [ 559.037449][T25481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 559.047513][T25481] Call Trace: [ 559.050817][T25481] dump_stack+0x172/0x1f0 [ 559.055165][T25481] should_fail.cold+0xa/0x15 [ 559.059771][T25481] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 559.065629][T25481] ? ___might_sleep+0x163/0x280 [ 559.070497][T25481] __should_failslab+0x121/0x190 [ 559.075453][T25481] should_failslab+0x9/0x14 [ 559.079964][T25481] __kmalloc+0x2dc/0x740 [ 559.084215][T25481] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 559.089686][T25481] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 559.095932][T25481] ? atime_needs_update+0x491/0x5f0 [ 559.101140][T25481] ? iter_file_splice_write+0x16e/0xbe0 [ 559.106694][T25481] iter_file_splice_write+0x16e/0xbe0 [ 559.112077][T25481] ? atime_needs_update+0x5f0/0x5f0 [ 559.117335][T25481] ? generic_file_splice_read+0x53c/0x800 [ 559.123061][T25481] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 559.129069][T25481] ? add_to_pipe+0x350/0x350 [ 559.133671][T25481] ? security_file_permission+0x39/0x380 [ 559.139327][T25481] ? rw_verify_area+0x118/0x360 [ 559.144180][T25481] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 559.150184][T25481] direct_splice_actor+0x126/0x1a0 [ 559.155304][T25481] splice_direct_to_actor+0x369/0x970 [ 559.160684][T25481] ? generic_pipe_buf_nosteal+0x10/0x10 [ 559.166247][T25481] ? do_splice_to+0x190/0x190 [ 559.170940][T25481] ? rw_verify_area+0x118/0x360 [ 559.175813][T25481] do_splice_direct+0x1da/0x2a0 [ 559.180873][T25481] ? splice_direct_to_actor+0x970/0x970 [ 559.186436][T25481] ? rcu_read_lock_sched_held+0x110/0x130 [ 559.192163][T25481] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 559.197639][T25481] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 559.203885][T25481] ? __sb_start_write+0x1ac/0x360 [ 559.208924][T25481] do_sendfile+0x597/0xd00 [ 559.213370][T25481] ? do_compat_pwritev64+0x1c0/0x1c0 [ 559.218671][T25481] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 559.224918][T25481] ? _copy_from_user+0xdd/0x150 [ 559.229787][T25481] __x64_sys_sendfile64+0x15a/0x220 [ 559.235000][T25481] ? __ia32_sys_sendfile+0x230/0x230 [ 559.240314][T25481] ? do_syscall_64+0x26/0x610 [ 559.244999][T25481] ? lockdep_hardirqs_on+0x418/0x5d0 [ 559.250320][T25481] ? trace_hardirqs_on+0x67/0x230 [ 559.255372][T25481] do_syscall_64+0x103/0x610 [ 559.259977][T25481] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 559.265881][T25481] RIP: 0033:0x458079 [ 559.269780][T25481] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 559.289394][T25481] RSP: 002b:00007f407ebccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 559.297823][T25481] RAX: ffffffffffffffda RBX: 00007f407ebccc90 RCX: 0000000000458079 [ 559.305826][T25481] RDX: 0000000020000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 559.313800][T25481] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 559.321775][T25481] R10: 00008080fffffffe R11: 0000000000000246 R12: 00007f407ebcd6d4 07:03:00 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, 0x0, 0x1b9) 07:03:00 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x141000, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000080)={0x2, 0x5, 0x7, 0x210, 0xffffffff, 0x16, 0xa}) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {}, 0x10001}, 0xe) [ 559.329754][T25481] R13: 00000000004c4f95 R14: 00000000004d8d08 R15: 0000000000000008 07:03:00 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x7, 0x200002) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000200)='trusted.overlay.opaque\x00', &(0x7f0000000240)='y\x00', 0x2, 0x3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)='oom_adj\x00', 0xffffffffffffffff}, 0x30) r2 = syz_open_procfs(r1, &(0x7f0000000080)='oom_a\x00\x00\x00') ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000000)=0x1) sendfile(r2, r2, 0x0, 0x3) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, [], 0x11}, 0x1}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e22, 0x0, @rand_addr="b5c16638df57bce30f11951e18159eb2", 0x1}], 0x88) [ 559.400664][T25497] hfsplus: unable to find HFS+ superblock 07:03:00 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = dup2(r0, r0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000040)=0x1) write$P9_RVERSION(r1, &(0x7f0000000080)={0x15, 0x65, 0xffff, 0x7, 0x8, '9P2000.u'}, 0x15) 07:03:00 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7fff, 0x4fe8053ef5907fb9) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x5, 0x9}) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) 07:03:00 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:00 executing program 4: syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000000)='./file0\x00', 0x1, 0x0, 0x0, 0x40000000, 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0xffffffff) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.evm\x00', &(0x7f00000000c0)=@md5={0x1, "8057da0492048f9b0e8cec5b439376ff"}, 0x11, 0x1) 07:03:00 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') sendfile(r0, r0, 0x0, 0x3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x28440, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x4) 07:03:00 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000000400000000000000000000000000000000000000000000005881a331deb4f35c2199b28f0000000000000000000000000000000000000000000000000000000000000000ff7f0004040000000800000000000000020000000000000003000000000000000600000000000000000000000000bd065cc1f7b900000000000000000000000000000000000008000000040000004ab392350000000007000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000040)={'U+', 0x180000}, 0x28, 0x1) [ 559.669535][T25517] hfsplus: unable to find HFS+ superblock 07:03:00 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x200, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='bond_slave_1\x00') getsockopt$inet6_opts(r0, 0x29, 0x3f, &(0x7f00000000c0)=""/160, &(0x7f0000000180)=0xa0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, {}, 0x10001}, 0xe) 07:03:00 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') sendfile(r0, r0, 0x0, 0x3) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000000)) prctl$PR_SVE_GET_VL(0x33, 0x19ac) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000100)={0xfbbf, "6728f4734fb8008cf518c4e0cb8154ba6d8c87377a4634209a1050341f82b04b", 0x2, 0x1}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x80200, 0x40) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f00000000c0)={0x2, 0x4e24, @multicast2}, 0x10) 07:03:00 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') exit(0x0) sendfile(r0, r0, 0x0, 0x3) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000000)={0x7, 0x14, [0x80000000, 0x0, 0x8a9, 0x7, 0x0]}) 07:03:00 executing program 3: r0 = open(&(0x7f0000000040)='./file0\x00', 0x400000, 0x100) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r0, 0x400454cc, r1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x4, 0x0) bind$bt_l2cap(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40080}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x4, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) [ 559.743741][T25517] hfsplus: unable to find HFS+ superblock 07:03:00 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x0, 0xe5b}, 0x110001, 0x4004}, 0x6) 07:03:00 executing program 4: syz_mount_image$hfsplus(&(0x7f0000000180)='hfsplus\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000080)=0x80) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x851) 07:03:01 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000040)={0x0, 0xffffffff}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000000c0)=r1, 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, 0x0, 0x0) 07:03:01 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') sendfile(r0, r0, 0x0, 0x3) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x955, 0x1ff, 0x301e8ffd, 0x80000001, 0x1}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={r1, 0x6}, &(0x7f0000000100)=0x8) [ 559.956508][T25550] hfsplus: unable to find HFS+ superblock [ 560.026855][T25550] hfsplus: unable to find HFS+ superblock 07:03:01 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x2, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:01 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x6, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000080)={0x1000, 0x5, 0x7fff, 0x1, [], [], [], 0x5993d889, 0x101, 0x7ff, 0x5, "b363eb303f8bd1e6c2ff2e18ea6c34ee"}) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {}, 0x10001}, 0xe) 07:03:01 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) msgget$private(0x0, 0x120) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x100, 0x0) ioctl$int_out(r1, 0x5462, &(0x7f0000000000)) 07:03:01 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x58181, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000080)) ioctl$CAPI_NCCI_OPENCOUNT(r0, 0x80044326, &(0x7f0000000040)=0x8) syz_mount_image$hfsplus(&(0x7f0000000180)='hfsplus\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x13, 0x0, 0x2ca) 07:03:01 executing program 5: r0 = socket(0xb, 0x7, 0x1) fcntl$setflags(r0, 0x2, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') sendfile(r1, r1, 0x0, 0x3) preadv(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/240, 0xf0}, {&(0x7f0000000000)=""/72, 0x48}], 0x2, 0x0) 07:03:01 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000040)=0x17d, 0x8) [ 560.627483][T25567] hfsplus: unable to find HFS+ superblock 07:03:01 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x8000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000000c0)={0x37a, 0x0, 0x101, 'queue0\x00', 0x8}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') exit(0x0) sendfile(r1, r1, 0x0, 0x3) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x5, 0x5, 0x9, 0xfffffffffffffffe, 0x4, 0x7fff, 0x400}, 0x1c) 07:03:01 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000040)={0x0, 0x66, "9d970082b692e50ca16e30a4ecdee7c0005705971e73a273382aa149f1be1ca0f1aa17f8e6f0b4fd04cce4b9c2ab41a089950e184c38abacda11551786a8b21b37395d18c0c56bcaf003473dc382f41268fe1674e1c7545971114ca01a53fb2165d4b76ecd2d"}, &(0x7f00000000c0)=0x6e) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={r1, 0xff}, 0x8) r2 = socket(0x9, 0x1, 0x9) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x1, 0x0) ioctl$RTC_PLL_SET(r3, 0x40207012, &(0x7f0000000240)={0x76, 0xfffffffffffffff9, 0xfffffffffffffff8, 0x3ff, 0x786, 0x5, 0x4}) sendto$rxrpc(r2, &(0x7f0000000140)="ce3fabb4f411c0ce617369d7ed59a6ed052fa8178898d2aded9f015a1e548203915d323313b330a6501ff3af46112fe425e7af843686d0597e95b864940c60ff57078142414a6ebb76b26bdbcb9a5e987adc7fb17c3e056bb27d70a4a45e1a57ccc763d7", 0x64, 0x0, &(0x7f00000001c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x24) 07:03:01 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') sendfile(r0, r0, 0x0, 0x3) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={r1, 0x3a, 0x20}, &(0x7f0000000100)=0xc) 07:03:01 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x90000, &(0x7f0000000080)={[{@mode={'mode', 0x3d, 0x800}}], [{@appraise='appraise'}, {@smackfstransmute={'smackfstransmute', 0x3d, 'selinux+:'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x65, 0x64, 0x34, 0x72, 0x0, 0x62, 0x30], 0x2d, [0x37, 0x31, 0x61, 0x39], 0x2d, [0x66, 0x77, 0x62, 0x61], 0x2d, [0x39, 0x77, 0x39, 0x77], 0x2d, [0x76, 0x76, 0x61, 0x61, 0x36, 0x76, 0x66, 0x64]}}}, {@dont_appraise='dont_appraise'}]}) 07:03:01 executing program 4: syz_mount_image$hfsplus(&(0x7f0000000180)='hfsplus\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 07:03:01 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') sendfile(r0, r0, 0x0, 0x3) [ 560.914206][T25599] hfsplus: unable to find HFS+ superblock [ 560.977719][T25599] hfsplus: unable to find HFS+ superblock 07:03:02 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x4, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:02 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {}, 0x10001}, 0xe) 07:03:02 executing program 3: bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x9cfd62fce62ed69e, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e20, 0x65e, @dev={0xfe, 0x80, [], 0x23}, 0xffffffffffffff65}}, [0x2, 0x10001, 0x8, 0x3, 0x0, 0x1, 0x6, 0xed, 0xc7, 0x6, 0x0, 0x6, 0x3, 0x3, 0x100000001]}, &(0x7f0000000200)=0x100) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={r1, @in6={{0xa, 0x4e24, 0x2, @mcast2, 0xffffffff80000001}}, 0x0, 0x3}, 0x90) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000000)=0x8, 0x4) 07:03:02 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') sendfile(r0, r0, 0x0, 0x3) write$UHID_CREATE(r0, &(0x7f00000001c0)={0x0, 'syz0\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00}\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x1e\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\x00', 'syz0\x00', &(0x7f0000000300)=""/249, 0xf9, 0x10000000000f9c, 0x5, 0x8001, 0x5e, 0x1000}, 0x120) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x108008000) 07:03:02 executing program 4: syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x72b, 0x0, 0x4001, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000040)={0xcfd, {{0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, [], 0xa}, 0x6bb}}}, 0x88) 07:03:02 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {}, 0x10001}, 0xe) recvmmsg(r0, &(0x7f0000003900)=[{{&(0x7f0000000080)=@x25={0x9, @remote}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000100)=""/236, 0xec}, {&(0x7f0000000000)=""/40, 0x28}, {&(0x7f0000000200)=""/163, 0xa3}, {&(0x7f00000002c0)=""/158, 0x9e}, {&(0x7f0000000380)=""/132, 0x84}, {&(0x7f0000000440)=""/193, 0xc1}, {&(0x7f0000000540)=""/250, 0xfa}, {&(0x7f0000000640)=""/148, 0x94}], 0x8, &(0x7f0000000780)}, 0x5}, {{&(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000840)=""/168, 0xa8}, {&(0x7f0000000900)=""/116, 0x74}], 0x2, &(0x7f00000009c0)=""/45, 0x2d}, 0xab}, {{&(0x7f0000000a00)=@tipc=@id, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000a80)=""/227, 0xe3}, {&(0x7f0000000b80)=""/153, 0x99}, {&(0x7f0000000c40)=""/101, 0x65}], 0x3, &(0x7f0000000d00)=""/220, 0xdc}, 0x976}, {{&(0x7f0000000e00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000e80)=""/50, 0x32}], 0x1, &(0x7f0000000f00)=""/68, 0x44}, 0xd255}, {{&(0x7f0000000f80)=@xdp, 0x80, &(0x7f0000002300)=[{&(0x7f0000001000)}, {&(0x7f0000001040)=""/157, 0x9d}, {&(0x7f0000001100)=""/128, 0x80}, {&(0x7f0000001180)=""/153, 0x99}, {&(0x7f0000001240)=""/148, 0x94}, {&(0x7f0000001300)=""/4096, 0x1000}], 0x6, &(0x7f0000002380)=""/88, 0x58}, 0x5}, {{0x0, 0x0, &(0x7f00000036c0)=[{&(0x7f0000002400)=""/12, 0xc}, {&(0x7f0000002440)=""/35, 0x23}, {&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000003480)=""/220, 0xdc}, {&(0x7f0000003580)=""/102, 0x66}, {&(0x7f0000003600)=""/129, 0x81}], 0x6, &(0x7f0000003740)=""/113, 0x71}, 0x4}, {{&(0x7f00000037c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0x80, &(0x7f00000038c0)=[{&(0x7f0000003840)}, {&(0x7f0000003880)=""/29, 0x1d}], 0x2}, 0x7}], 0x7, 0x40, &(0x7f0000003ac0)={0x77359400}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003b40)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000003c80)={&(0x7f0000003b00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0xa4, r2, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10001}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x35b107a5, @dev={0xfe, 0x80, [], 0xa}, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xa45, @remote, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}]}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 07:03:02 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') ioctl$FICLONE(r0, 0x40049409, r0) exit(0x0) sendfile(r0, r0, 0x0, 0x3) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x4}}, 0x10) 07:03:02 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x3, 0x8800) chdir(&(0x7f0000000040)='./file0\x00') ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000040)) syz_mount_image$hfsplus(&(0x7f0000000180)='hfsplus\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 07:03:02 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x20000, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000040)={'mangle\x00', 0x6e, "80feb82563bd1ef719b450df7974cf56045c1bb12be1f10b65b3a8760e3e0c8174a550d13202cf9611d87d32136ddabaf2a45dac752b1ca2e50fc2331489d5feb2d04319c67f5c500cce580b7b21258769308c6f76eee9e684db1d1bd43292c3b2c53d0243856cdfed5399095809"}, &(0x7f0000000100)=0x92) bind$bt_l2cap(r0, 0x0, 0x0) 07:03:02 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x80000000, 0x10080) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') write$P9_RLINK(r1, &(0x7f0000000000)={0x7, 0x47, 0x2}, 0x7) getsockname$unix(r1, &(0x7f00000000c0)=@abs, &(0x7f0000000040)=0x6e) sendfile(r1, r1, 0x0, 0x3) r2 = request_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)='\x00', 0xfffffffffffffffb) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000240)={r2, 0x6, 0xffffffffffffffa7}, &(0x7f0000000280)={'enc=', 'pkcs1', ' hash=', {'sha384-ssse3\x00'}}, &(0x7f0000000300)="68071921d50b3e5614a5c2a4b6b35187cf8efa759b457bb5fcc4a9c3743c46b3913059dc6e8c427b1ba460d0be7b6a15c3ea686b6a5a78e19efac49d182b52a2cb49df29179be9c8abd6c2494be8b4df3beea86bba3324d20793a5e8afc457e7d1a9b19316fd89f488ef6b864665f405cb201129d7c6c4b99c9076792cf5b76df465", &(0x7f00000003c0)=""/67) dup2(r1, r1) 07:03:02 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {}, 0x10001}, 0xe) r1 = semget$private(0x0, 0x3, 0x2000000020) semctl$GETVAL(r1, 0x4, 0xc, &(0x7f0000000080)=""/202) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x10000, 0x0) setsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000180)=0x1, 0x4) [ 561.744068][T25621] hfsplus: unable to find HFS+ superblock 07:03:02 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, r0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={r1, 0x80000, r0}) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x80003) sendfile(r0, r0, 0x0, 0x3) 07:03:03 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) signalfd4(r0, &(0x7f0000000080)={0x4}, 0x8, 0x80000) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {}, 0x10001}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) 07:03:03 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000040)) bind$bt_l2cap(r0, 0x0, 0x0) 07:03:03 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x10000000, 0x4, 0xfffffffffffffffc, 0x0, 0x3}, 0x10001, 0xab35}, 0xe) 07:03:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x6, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:03 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') sendfile(r0, r0, 0x0, 0x3) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f0000000000)={0x7, 0x6c4}) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x200) 07:03:03 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) signalfd4(r0, &(0x7f0000000080)={0x4}, 0x8, 0x80000) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {}, 0x10001}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) 07:03:03 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') exit(0x0) sendfile(r0, r0, 0x0, 0x3) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x7ff, 0x2}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={r1, 0x7d1}, &(0x7f0000000100)=0x8) 07:03:03 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') sendfile(r0, r0, 0x0, 0x3) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x401, 0x4, 0x7, 0xffffffff, 0x0, 0x3f, 0x80020, 0x6, 0xffffffffffff223b, 0x0, 0x2, 0x2ba, 0x38, 0x61, 0x1, 0x4c10, 0x7, 0x80000001, 0xfffffffffffffff8, 0x4, 0xfffffffffffff001, 0x588, 0x0, 0x7fff, 0x0, 0x0, 0x1bb096ac, 0x8, 0xc2, 0x10001, 0x7f, 0xa400000000000000, 0x3, 0x3, 0xffffffffffffff68, 0x5, 0x0, 0x3, 0x1, @perf_config_ext={0x5b5, 0x6}, 0x1, 0x80, 0xfffffffffffffffe, 0x9, 0x100000001, 0x10000, 0xef3b}, r0, 0x0, 0xffffffffffffff9c, 0x0) 07:03:03 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x800000001, 0x0) signalfd(r0, &(0x7f0000000080)={0x2}, 0x8) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {}, 0x10001}, 0xe) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x101040) 07:03:03 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x48000, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, 0x0, 0x0) 07:03:03 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') sendfile(r0, r0, 0x0, 0x3) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000000c0)) 07:03:03 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) signalfd4(r0, &(0x7f0000000080)={0x4}, 0x8, 0x80000) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {}, 0x10001}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) 07:03:03 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) sendmmsg$nfc_llcp(r1, &(0x7f0000004980)=[{&(0x7f0000000080)={0x27, 0x0, 0x2, 0x5, 0xfffffffeffffffff, 0xffff, "a81909a41bdb67ca618205481785fc4ccbb55cab9caba05f58c26cea06d23f64783407e281d0846e10f0d543a27ec7664e376efc50b405cf4fe573a55c1870", 0x2c}, 0x60, &(0x7f0000001280)=[{&(0x7f0000000100)="a0367a020c582fb97a7191b8696050539e6c9c29185b137abf1e834d5603f38445f6f7168acbec581e70e4d7c66670e068ba0319c5aa490469ed085ccd20ac21414bc8e2af35f4a429fd89218338de979df564d37000d536efa8601508314a7d3e61c63f62bfad471da5ae1dc985984fddc86a46e9c28b968684eacc4b00b72996dc868854e461", 0x87}, {&(0x7f00000001c0)="fb6d3fc10b98ed781dacf840dc4e65352e88603e1a44983f924e295896bee3479fa281c18238903fb173d1f2e98ce3d2f3167611d71617e8f9d372c7b920d4b7c4aae743f76f5bcd5284558820943c3734aa81574d17acfd23e10e91a84288a6a84d4e5af37e037f5ab715d65a0da4d19d9b9dff10276869267c7a2eb77100d143e12ba5dcfce7048ead48dde1986a2ea1ffa1014647aef15f1a99f07de75a28e5604ec6cad76aaf529c850acaa57e81", 0xb0}, {&(0x7f0000000280)="df1bc0c0e12fd370c90665b594cefa6832d354985089d56324da44755cff58b895115ccab0623e8d63a432e265d47cb7ee400cb053ea9b3e148ff161e3250a6ed554f05b59e98fce52f31805fd72d3b3d0dcd5446a0f194b07aa9ff87536674c2c14a4a24681a70585b9997216a7d09a6a5f8ead2f1e01bd136debcbddfb1dee1b64a30f2b8aaaa01515c12044841c4fa8b8b71cd5af720f686b7f73a7dc05b4edcc9049971ff8a71f4e6b693171ae9fcb261e44f312e218406dfbc087236bc6c945e1dbd2ad708e04a9ab5852d8047ee2644b693b1b20c02247c0151cacabac8c28e144fe898afa13923e4407d9415ff9c3b332b5c39e7f112585c9dbf869ce5eb69f1a0c2d1902d34238a2ce3633d21ec58e661dfa9f41d08a2cb50ef2b8f7a4b9738a1252962d93dd55b5061469b808e8b0c866da7b9aa0de645166b22b80ab738603a76a75672a6dae6146baeb71deb6bcaa5f72ae3a18575c050e593ff35ff11e210c4dbf4e3fabd39c8296b9a02ac4b19a0619f2a8dabca942d32bb001e4e89eef736e80c16a5b8b917afac4a3866b416b7a72746c2cab9c450a10d01c06d24e93a35d0457705e9e306f151bc6bf86ba0966441838846db4a098bad1edba10be5ed6413c3aaefe5043602aa52d4902d5208d457e6277908c7d4b694e1655f97c34630f8ee779431b78dac694eea4fb84af9782de131ba7cf7678b25a98ad1170b15596d2302754ad2b722847c4c1ddba1f75c442f05ce0e70a3f6ad333e2452ef78c9974cef8428afdf8f01d5dd3a1a07818c09b730f2b48835606b56aff5096a12781736b1888388c36c600f14a82dd355643ef8031d0ec308f4989cb8c9f769ed933e378417d0df0d408c171c7b38a6eaae2b0e32984202f9cda4e4eb2868e62fc45a7564d0d9e0e174fe39e42f198f2da0fac95515cbc6eb685689af776c69a550940c65f44b199b8dec3a0f8dc16b9a2bca90b010f571366d66148db6428008a0e499df21de0ca4868543c4c49bded7dd8fe4fa89aca2e3f7e18c091ec1101ab37e6937838b1d00267b8f7ce0d1652e4d51ef753f8b6c355e07b82bb35451bce902afd61861100e7265225becb5563c337af129e2314354fddef1009a3b88ccce552479908393ae344e9b6982eaf6912ad599716b858a6aaa39daa85b5e69f01a3bbae064e6f505c9865af2db2824c64c60185909d511385a0955fa8e99dea636f46c2c26a72bb66c31ba8901b0693987974b3026d321ce38cff662b3b3d9cc1410f44c07e3a274405935737624ff53d77df4835b15f05c143cf8e11c8f5405c5077d703ffbd0229a2f64750b321260d0344581ebb4abff2f7d2229116fd2307610ae9b6d4abdaaa20778c0c8dfe2e1a7db624599b60b3f6f86a3924eb39315cfe9969aa332b452803219f2bd3578b731fa3123f147ebce0d284bfc91da0bab0e82c8e55f22825d870a63a08753eab5fe7c9ae6b1627a9bbb9140d357c2a2ca5ff725d10ef67755ff40b3812dfc345d24a48c9d8268684a3315a3fb014631278a094d3da3131326d3e9241a60a647e21e0b6d656d5c4e802b63012c09e63d8e236f728d93ec8c43ccc64563d630812aea660a3a3aa75b2263af6feedbf12922d0c476df68c6b2b0c00ead308ccb3565d5cb41f6f0802912dfa7093a7cd037776b1e3f7d06d3e95ccc2351a11effe4b844bd0a9a7ef2f4d4cb36e82e7c752fb5af07c86d52bac1fc7b46999d51c85a805b745346dd70448b5f86f2a139af0fb73c2d30332f8aa7802da96ac2abddd13410993eac567a2e2ca919d1816f26dac95b4e60357f0ad369ba4727d9bdfd7437659f32d9ead058ffc3ab9829f3076c8b9a985bbcc4be06f120ff66056f36aa704a34f1af8db1da6f378b59c2524e16f7db8dec10289f688ec5c29294cc76647e89697e8cb91f58612e8c04d76eb25330e4cde185d68d6ab0f55dceede160127109148954cee7418a22cdd6ef9f5efd5f801eefaacdce459f60ff08f2c9d28253f87a45d264e3315cea9aa7088ee6bb4f9180bbb6edf595e2993a99e462a1a683d773674942281c3366122de03aed962bbcb0e93141aab9511685bff9ded5bea74cfa47ff308478facc71b94d413b947e915fb05b3a8fe494d484fa68c628f2d73530a08b591fe6bbbd268a87520fe3964b9e097ea836acb85c0d9eecc37197bb0da0c04bfa2afa02e6dc604949903dea58142aa024a87afaf74c7c50f9d5e914670cedf572dfed7687c491b4b8f25c7a59e0cfa4d232045aa1517e06f7db0548e21cb1dd58146d75a701bf246ed81162f1525eddbf4b6cef7b922c8c3b497851ad7fb492e851291652362126b0942a62782ef5984b363d40cad65f04dbd3bc21f41cac6203261878a514ea1a38fb0a1c6d45a7e8f5781a05360eb507aec6c8d95afef629032c85b1559a66a3caa03fc9f35a010b35de6bd909ab85f410cc188091b6fb13d8accd1cf086649beb08088f7bb3c9b0c5e335490969a2361876916a49e346b0eb5392c44bddcf77490d906df564ada76f427ca2df0ec7997746b83843462888619d1b67ff343c0b61e32736b2d60e22f6cc1775598069c2019410896ebb6af8107923ca81e9eda60ff99d2531a7300d701a500b1ff2974d829a366d03988d261ef06ead7482d2dd3dd2a45087524220e83b8e17bcdedb7d21e31f8702343c49be083b309b03bc1f83a7d502e9f92c7940ef524a15b84b805d6b1464a769de735a15a574cc2498a142e2cb87bfd02cd4f16ba4de4b47a9b680ad698385ebd260f85dd938813ae613c9f207ad973c84cca67ded7b0f24885803dd1138ee7caedfe277688ea6d08b25431e1ba89f7151b8e21e3c3e1c09793e7e7d5c0109b1962e93f7402fd3b062211cc3c632eaf59a24b681463bfee5c22228ef8177e15cadffdf7b75d2c50cef02870d7264e92c877a332afe21edbf2e1ae1109a74310ac54ea77fb6e3e702ddbb0d9602a1d92f169587f51e085f7c42a3df02d0c255e222891d66d60d31aa79f94d7620720b1d07355cbbb8baab037fa65ec58db20157ae4c5bd24e74e42d18151d5fcd67ab2cd460e23903228d0764b5f57cbc3c0fc7ee9f492e65da1ea76cf472a9d56e45770ea0b55e7046c64a2b908c583bbd9461bd84f96ee15be00a7c088ea2006ae5d4c981ac653d44dabdc7215d3253a52d4bdf6d2dcf843fa1304b38ec3e4f8967e414fa161fc83354f5d566f90f301fb54bd354ef0a96e1430613a2297889b956a1aa8ba6bdfc762e88c810f7e59d1131e12e9d513c32abd665898cc258b974c1f257e3de3b547f7e4af10fce9f9e041be4405016f037fea8524b0912f9a016280abb8b31ecb8c04d8938e621aef04c852fdff1e91ab959d62ef39ba17f70c627039991db8a09a51bf933e14ff5ae73c8339578c26823b7fee70ed199860c40880f7aa508735797f55dff19b92de92c130624e4ea0603851c6abd74af9291fdd34fc56eb9a93975ccb5e4ff9eb916d906d29d1da1240be4c9a917696320a8c31fe69295c07776ae2acb779dfb9e2902af121e8799d795d84896dd4ac932453dae49c5105c701999e7ecb098a3f092f6f336677f0fbb948457fd972859c496efffe220d4c083d8d228ecbca45f930c0fa5390292d97ff68db114ac8212ff83344db6add51b3eb741c05ebd9d69e39197f170c24a5b36c9fb500960441dea382d757dad327e433e44081180c9867efaa9d7be395f82720c9c70bfba55b9f7d1eb421f5496733f56b84f98411c7b32e75222d4f3691d416cceb20afbcafeb25a97904fadc893c09a11672cf1fff223fa3d4b5d4e2214bf573e9ac308fcbfcbdfb25b299bace9f80e63015f1e8c778054f7d005d8e2c58fb66b1036af2265bf2b21f61e07f9d959eeb6f8494f763ef0d2ba2abe22ee780eec5adb32d084fdb905c43f738300b09d0a22dfbd4cd2b7757e55059ce91e4eb24a283154e13342796ee87df1e72ccd80025ade838e137095822b51bd771a33b1efc8ec94f54b465ffde1e46ecaaef816b4c14b783609b466a4b0701d13cba49f7e58720b9799cbb96cf98c166ad85a236a1ef1257069434e09fd6948d28c3d1524814a1bc3ba320038515b7249d00d8ee83b2538c0a23b470903cc70bcb5d2b5db2d1dd925137524a7b9448ab8d19471c0db19a31aca5a8cb6767be09fb4c8dbbf4263b22604e9a24a1247f6e8701ecd8fa4c7d3b93a9ba01854e23b2b84c79351e481f4eacffbe8567bfb69a7a47cdf34d2645427ef181422e3558b86da61fd01dd9e071ad8fc3b316ab9a5532b61cf96e1b8ca5c99b2d6e528da54686d06c412168d8d21fc6559735194dafba2b7783806de16447fec695265cb0b1f8840d974dbf3f5ecf14429589211e4433781ba500a845422e0e96f62ad0402e654869def0d5818c2ff3bf9a452fa353d704bbe39664532943b8a6ea0603fe3857a93feb7b21c884dca2dda3e09df9a2da31015f74d6e06c0134d4e0fdd8a5e05234ff40ca95fc1cae3a1ce7b56ba7a45c7f48a079b7bcb768ef706cca93a16c514085e7d10e479e728b492ba2be429131df7f71fc763e47bac73e44c11d071466af22b59f054723963227d9b5a7446c1aec41e5b918cc31165f2e34a7950fec2b4f5d9ade6dd601f269162bbc322f3542a9afc0e68fa8ff70d0ce6787cb807d767eab90e31b4c1c70c55829930527601426515271375ac19a97cba5153577dcdc1226de3584d8d48aa3f078b4883d304e8e22f806d15436c1be216d3835034d2bb367e053b4d64e920a9ff33a2108703a6e180b0ceba94eb8a74aa5ea9efe3437c3285e67abb3665e6b4f9571e522700530a96498635aaabbe5fb0058fb746a46154ffded3e2634206734b3ff43c450d0d3a04b5481185cb7f4a567efb73de45ea6762e279971365323863f048bfa4ff2f47727d6e4654d33a76ce802374b6a550232c7869d3279ebdbcac35a7841a4153e9da568f39252464ba3b7167cb310ca4649f3b697aa1d6868aaaac9ef419d06726b6b4c789e83a79b357d937a3c2a82cf65a4e622b2094d0bf4708b073a087e6356a5dc6156dfc62bc6de77b6b8dfac8e5b6f9a918606c1591c3364ccd0f123aa0573057ac757c50ce61fad0d40aad66e5f40d2e64202c585713818d28a360348add5fce0599feabf79f181df688e40a6b03a74e5bec9150d3e7fbe384db85faf46a9cc480ffb65240076f222971af512c7f624d7c229befe7b85227640a8e261bb50a633805542b75e5e833f7229993ab29121d60e4850778eea97920a15e81a890c937bc3b4effa0e8c4303c352f831dff2499f6842f0114a4c86fbda269b5761a69e660a34aebfbcc89bff5994d9147f673a640f408d63335823be21108f13e6c2ab734e130dd8d4743e6a5b93dd8c593d799317110ff0c6d73cd50c6d0a0141611a25696dd18b4fb58d921ca0b7a019f6ab2384ed12ed057c86bc23d3cbed73158867c29c66f08dc4c974b8fb418045e3e1db7cbac1dc37a251dc428354862e46d07be6b3d393ecf903994f01b5afd891f048fcca6543e80cf7a83f7cb492f82271cea65860e0b354b535142aca868e7b2da51c9a9e569db5fe2f53e5a9180bcdc8790d83e7e06bb4ba26c46b5c49420e047c82125fe1ab98808cafac98b146be7dcb25c6ef9a1c798996c742d81179f0b846e1221f3e9080716574c882a2957756a34a2428ec12a348fb65203beb554fe4c59b2a9ce272bb0c5f5029677960d4e953c1c73533cb221061a380b706410e5c1ca9a236", 0x1000}], 0x3, 0x0, 0x0, 0xc0}, {&(0x7f00000012c0)={0x27, 0x1, 0x1, 0x7, 0x0, 0x7, "ca38b5a51cf939ccee1a15e12aac33852b05109a56b30a11bf6eaceb915c805e2355f659ca1d8d07c452ba2a1568838533bec70378003da1cd640b54b4f246", 0x5}, 0x60, &(0x7f0000002340)=[{&(0x7f0000001340)="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", 0x1000}], 0x1, &(0x7f0000002380)={0x38, 0x119, 0x3, "7ff88f8b8b619dcc8e786530c37881907241bdb36734189a98202be75ca25304423891"}, 0x38, 0x8000}, {&(0x7f00000023c0)={0x27, 0x1, 0x2, 0x4, 0x4, 0x9, "24825d353b60135eed3ce9b6d0e2f5e97d34bcda1340f190e29fde66c7721d51462f516b50903307279ef98ec90bfe5739a9ce7f25186ccefe8c85b8d582da", 0x28}, 0x60, &(0x7f0000002600)=[{&(0x7f0000002440)="8d184620a116a6234c83482dc88729e65d5174cf4c3774c416857fd3d4759ca4558c2dc3d48e5804f17020e2abbaee7f4c4738c1a2db4b4f17c85d6b04a742f90252a49693f567d206d5a679bf761e8ed549380b88de6e6a2e7f0b3c89d3f2177de8d6bad9a5f2baf0bf29a23dcf39e91c2ebaf274d6e1c5ad9fe8004aaac49a6a708909333c4b3a0c8e17623668ec0f5ae5db505931e23bcd3641e4f902968cbc987d8cbce51fd272d6f474e97abb973cd67e21fc3c3ad8", 0xb8}, {&(0x7f0000002500)="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", 0xff}], 0x2, &(0x7f0000002640)={0xf8, 0x1, 0x80, "d88c248f583fbbb363d3c41ff0cde9d04b08ac451619b606ba68a578f08b42a7395ab13da2ac8bea0ab1811c19e74d423bc780c62a6507e79d3b6e43e10fd6b2e758f57fa1ec4d53be8c3de38dc4cff56cf39a0c20337240c1279577325af47028fbf50ca598b6f73a03a9e6df63384b7cc96489c2273c675a762bfc1f2638dd0381e8b88cff8237fb9ecaec8d55da3e07fbbbd9e40da66f9d58e7397be01c19169b361c250ea9feb4f9737074ff25963526f79cde7fe60b37e3932cdac95b8e4db3ea4dabd5c0bec2dba2acee84c6a8d97e4e80ca2380ffc4166365db8be19fc27fec14f44a"}, 0xf8, 0x4040010}, {&(0x7f0000002740)={0x27, 0x0, 0x2, 0x6, 0x2, 0x7ff, "94787425da0203561ed45dcd522d1923dcd9200f7c7f06c661a044f6d1216e7d75709c9537a54217a7a22e0dd9fe0720b412bcf5afa4219f2474b98f3f1e49", 0x3e}, 0x60, &(0x7f00000027c0), 0x0, &(0x7f0000002800)={0x38, 0x11, 0x5, "914e9363765a55c6d66306735f3687cd7d76af3300157415e4ff494b43b225742f32e276"}, 0x38, 0x20000001}, {&(0x7f0000002840)={0x27, 0x1, 0x2, 0x7, 0x3, 0x6, "4c3dfae24f3ef07d6a47e028bb8563902a83aa2eb517b1a7e0ce6e2804622b0dfe5d51ecd21bd2574ba6b32c8e3bdd813c8be9f666e5958133c0a0dcef2eda", 0x36}, 0x60, &(0x7f0000002e40)=[{&(0x7f00000028c0)="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", 0xff}, {&(0x7f00000029c0)="f6e96c95c4ce02813e0a550a427a", 0xe}, {&(0x7f0000002a00)="4fee39f2d85d2c59a7c15904b8b7390d1512a9b12fb87b50f3d92cf9c830f1df904ae0162b0813e3e088dd7952f87e27bfaa43558b023fc48d786bc504e5976b6edad9ba8d4e1ae1366c08ad4cc45c821afc610b8cc32e35a0eadf6f6e1d400827999aaf6f38b28183cba5cd86d0a1624d7ed26491e6276f10ccd107f210e95dc690092dce42c66452c5acf5030afceeb64191359ceafdb98a81dde3a5f029567f74df215d600aa3a1d1b3d0b80d", 0xae}, {&(0x7f0000002ac0)="cbf51d86538d3a2b7f6e152daf3b12dbae41b6669e29d7bce9ba2f8958e62c4e021b7c419aee0bdcb7a86f971ec1b1d414704d835ce7b2148e303134b01cf6515ef790352e33d9522501afe0c6215a33e44fe502bf7feb86eb7ec6c8dd040e31fa1cee0a89050d2815e95e66e3c5376a66ff7bcd010fc6f6a605ba35a6b22d6b7a4147fbc08946a38165cca72cc9d4214d5b20c8200ee0d55c816baa8c9f4f7d6a17", 0xa2}, {&(0x7f0000002b80)}, {&(0x7f0000002bc0)="a7f8e51efe4b2278e1de6eb01cf84486f80621dd8705b16aef44d9a0d219764899b9c1c0cdf08a25b7f6e159eba43803b9f9d006ebfc50c1ddf3249f906d1096c96273e8d127824337105dc3149db7a235516c7501412e", 0x57}, {&(0x7f0000002c40)="3ed2db8eb774118a31450137ee23e54d5fc5ee9df76cee7aaddc1cf756ab6de74cd788d847e183dfec2d70ee73acc7a956d5d8854c7407cd597ba5ee10c19d335e5eb961c40760cbfcabb01712c8dd95b8b9f9005d8091efab77936a49cf6cd43edbd967f491d0748d61b179e1b47e08d466497715496eae0d83ef47af3949a0a4d9e9569e0e3a241ed7c65e7371f21f1192eefc7a16bd097b37b523b341b7122a224a5f1936e09efbde8d3aee3db75cefb5945a9166b0acb09d580c6135", 0xbe}, {&(0x7f0000002d00)="272b6ceb1eb2f1cf51cf6696fc4b", 0xe}, {&(0x7f0000002d40)="b3b5fafe26120bb93ff5b034690c81e398af31b16e7ffdb69d576a2a9a978073ba72a37d9e77ae384553417fa5429c20f14a3ea181a5c089b50968c8136a2d77845d128319df1002e763856cf64ade45ec5eadc43df66dbec679bee7b59bb68e9ded2b0d8e79e3f7295fa5b53dfd4540d3920fce51ea7349a5fb6d85a1bf90bf685c0396ba318409f7dab9debdfa1b0b46342cdcefa71c5ab3a645f811223bdc04b024de4c00fde547dec7e4cffa496e545454ccf1de462c45a11cc4aa962400c19b6b2d3e6b59cef3bdafd16982553fc6c84f9f186ce94159105697919c15e9a2", 0xe1}], 0x9, &(0x7f0000002f00)={0xf8, 0x0, 0x7, "5aa56679bba282a64f0e1394629076c7349d611037f26292236d267604fdd2103d9301306bfa597b63f2ba38831316fe9089d5a1f279858d33d9298a55edd5d441f200815c5fc94a758495ac8467cc235e13f3b91835d036a8a282478f6774570ced0a0090faa6ab3cdba0def271893c63d7a3cae9256167bd0efc58ba163a9bdad93a47fbae83f46f0162b51eaba2dcc59bc05ade8a344420bd5f758ad3742844df916c4e20d11521ec768641e5fd9f2b1cbf0aa83ea01b569c8438520a52b3df5df9c3b54c92a7be382d6ed4ba8a8f8d25d022f3a0c95b9a4b5aeb1b5662baf709f5dd6286a3cb"}, 0xf8, 0x4040000}, {&(0x7f0000003000)={0x27, 0x0, 0x0, 0x5, 0x4, 0x1000, "52c450ebf12e0cb0f1d0ebf1555d9202dc12c9bf68d9774a66d6009db64144edd4776fc4304e25f02ce6111684de2a705b3655cd10baab20010cb0662c2fb8", 0x26}, 0x60, &(0x7f00000033c0)=[{&(0x7f0000003080)="c57af62521edb8e59dedb76c3b1f250454832778f452ae2663c05d7bcebeb58bf9ccbe4794dfd3a3a5f249e4ba3c7a1bd6d0e6bbc49ab02541d5335b4cf5b99f2b216c1e3aa709602b471f62bbb1a41c2bb5e9e047157ef39b8892725615ca60a3eaf432ee5de9c652f3e90a62ac685603de11c35b4ab211f1074e96ec97b1e0592021a12f57cd796fc88cd266a3b4026f1a450e94ffe788db047988c85e3a661c5efd7d440ee3a0e54287832d83836cff3888ab1e9723f19af1e5a7ac7c9f747513b677284ff61aa820e53b9c6105459dddd09b89d7a3f9d674568cd938e6d1033e09101038aa8449d847858e", 0xed}, {&(0x7f0000003180)="852a826e208380b2cee66a25a34d56e610650d92089b53312c863298aa63375e94158909ba837d2fadd18b197c7212889677f04eeef84f8036a1535fab3ab80e075cbf788018f3e9a1357b1f86acb600a909aa10451a8785fa82c733dca95483eaa1a601cbbe0fd583895b131bd4e77552d4586c27d67cf34ba775", 0x7b}, {&(0x7f0000003200)="10710cdfc59410e1cf7202b5ca8dd44cd1cabdc0ed0d1c1560edaccce188dde84534d5c92283564d036f5635634c2d442ee9478fd7a5831fd25cb01fe30bf5177e0b7b3e4a730385f3e13f105f478ed6c2248756d40ce471a275a47a4fdf6b61c8311c344ce3e5fc0981a93646b65e9002cea038282a87a42d06b3ce7d4b6a3cbe899dfd792019f63f2f11b0fa83d4cf10015c14ee66ebcb2661753ab6e213f4e51e9c8aa814aa5b60a41c1db43e499b342250e9721b0c969547ee15ab0263e34912254cb9353bc370be4567ef7950d820ca248b3be9e9db4e49b7b1f0273f87b86666d53862c8", 0xe7}, {&(0x7f0000003300)="112bb46fc8b7971afde0c7c7ef84a4adc33bf5963241d83bf87a4c4dbed5fce0b3a923445a2772093dcb275a74e38474654b9985c94f68a79aa47bb1a7cc3aa2c2e0272d7e9787715641e75c2b5fae2eb776971efed161599f306f1ebb01126ee543913921bf7721f5707039d1ed4b46d4291bc2f3f62cc503991a30579682937df3103b761c4122513dd57b3ab27679493508ac59139371e8e646bc296e2d080a2d5746a9a4a2dbe89a7abd2efd9624729933", 0xb3}], 0x4, &(0x7f00000027c0)=ANY=[@ANYBLOB="20ff0000000000000000000005f07d01bdc0525be2625eac695a325301d06300f50ad6d2c658ce1197f72d48a77c1a41d5"], 0x20, 0x20008010}, {&(0x7f0000003440)={0x27, 0x1, 0x0, 0x7, 0x6, 0x4, "53a6f5a7fa5b6d698d1c2f22d79475956dc9cc736741fe1c3a8a3943c45fd3ff162b3086ea814a6db3517e4e54720945c96eb2e9c93b460d5533810708cf7e", 0xe}, 0x60, &(0x7f00000048c0)=[{&(0x7f00000034c0)="6a2031804f11b144b4c0cc2f5135248a1404d7d31a7112fc42b31b3b3532b71289b3f3e547b42ef79c96f538f55d155adf032131318401bb05801aa0604dfb9fb7f00fc5c1e985f0a63746b8842f605e7cee24bc5017ec73c12cc93e22cdafac8236f187fcda00c08cc9dcfccade28ee384c5d27af1d1a320e7e4222ded635d2e0c1fec97cc3660ff1a37fa085623aa13a4dc426e4868f7e36e7cd6d221e3f0ab8b7e2a11d810b284a0ba11fb6433a39910cc1fad4524acb4f76c0ad1559699211c04d760bafbae30de62793ca0357e604eb895ab30a547488129c5fc057a8ee81", 0xe1}, {&(0x7f00000035c0)="226615a2a1f718dfb5a2672a50b8555258efbb6c1f04feb6cc9a9a718059a79fde5b05a2e72d83c0b185d89b08a9a7eae7b6e6eaa77dca2ae36361d9fadcbc6eed1752dac33237bfe8f86daca9bcf4cc20402e7a455a6bf118a907399f3a2b933b6e50291679649f15c5999524813f776d5b8d01a24e03815a4710888bfa85ac2ea758d3d0ec8c776cd94346cb800852e19b0b6fde47cbee6aaf21b927590cd549a58e8a6bdf6c8e68b3005095d4b82a8e805d803f493a023402554bddb16a064936c365fa719944e76b5448b611ca7512066851e5747acf28c170917f3bb163d5bcecc5887e7456d288f29dba1818898645947af00bf5e5531d5e3948639ef2b5e55d5544ecb312698459013f215cdcdb2286999f94a7a74b71e709ae8b020a9fa91e18358dea4670642786efe662fa45d30200fd549710dde0a7af2f7e3f15b4b3294e2ba69905b41da62538cddcd29a1d9d3d5b0e9fea116746c11fb201be3ad32af7b58b68c12599b00f081e4e620da26b94d088e131c5c0a704b556018f891ea042c26e7e55b67fd1248d62cd9f1d41a39b87eb27c1a923ecccfabe654f070f93a805d37fc04c800a01bd488b3d594a61930b867fcddc6452b741a5997914147003b78501be319460d139016dbb1d35a98591c3afbc119617d77ea899c65012c6f51bc17045ae50afa8dedc626181efeffb43cba0522c075bd25fb8e1954dec54851d70ac7a488ebf98870d8a83784464943c125ad531a88e11b921c37a5ee64bd1a541b45eea85aa79167085d75ce9756e8ff53b009fdaf638473d5d6eaaffb610e625e8621434c7ac9ab8d9f3200927b160c805595c5d0b283334d6fe39afc03f3473ed548d7891977a740559adf63f49fcb442355cc00a3169afbd2cbd134453c1534992b69e5bb0ae5d41e8456f0947c08d9861b91759cb0049d1bbb6701b67cdbeab0fb917d09589ee8a868f368ad80371c5976953b9aa3be9dcc7acaa73770c6f26959375f97638811c07d5a2151352bb065c06411decccbead9c62750979721d3b1c9654dde35786fb7b625b81a53ce6b0daf5d00ad702eab1ac060f7a5bdab05909052d58f1a717e37015aa6c93ce5872e07c9dda9c4af113d3b93ca95e06d656414185f145228397d580c73830452011dc205b162ab4c8d35b9349aefeec034c0d899277b05160c7e3b33e7aa71cdb0a3c7f726e100f39aa8fd97d5e6c9e14da6edeb55e4b498f10b121c04960d3dc1b39c6758240237d7ea503cc0f75d7e7fab2998447fa18ccaa02ffc01342a7596427735d4d8a2eed73f59b6ebd34ed59934d7e5f3c9199dd1c6cd954ae76756da9bc7700d9ef488aacc559b92d40646b32eb311a63c2c8894bea69183e4400eea0eb553a7aafcc3910a52675e5d782d011bcdbd766aa4f9a5dcbdd0611906599dfe53f8321d7a2bdd6028af5048778bca7fc5a00d2c7208e280bf667a285e15a7d366d58e49a964191f88486ae2419d017a374dd6f139eb7ac300863c13b22b69367d7585c70edbc49e7e846bc53f2b565c02cd004f5061729554b8344f2c98d567915e465d76832f614cf08c49717c85652ca3e0bf51d99bc23d33d119b7ef8e90b176cc7176d0d096f986d91efa2873a06bf71ee99b0a954db8e783a9e6b12e79a8d8fbd8e38753a5502b6d1fa678fbb785b3a0ae84308e093ffc3201efcf3b3f0aa8a8870c570db551b9a94e2ea63c23635089853634de45abc99032af5a6a18eab3c4bcd7285b609feae6b00984981578ab0ea280d0d2255152fbda5651a32cad434a366f32055143cf86ddf4e10a999fc1018aac62c44663815ce07f83e54115014aa0db1fd55d5b56adfaff407ef10ac67ce1d1bb248669a999a01df1f2c1de591c93cd24c530fa611dd33595dd22abcb53cb4f7e837ac436aebf93aa2905a9036a807dfb8c32f64c5de1fa323975ca66ed50cee4ca20bbf3c9c93f089a8d3f0a5db55e7306c755f7d9b1872d5392a9109b1e99b04e38a36d09dd60fb4645a62d69ba2618405e8243d7627a1b820702d053f0eefff58ee937c5eeed671cc3aebc94b1922ee97b9115e30bf32d76291a609d5d200d622fd1565fa68bf069c88acb848bbd0e2f2e826cb0fda11f0593a12f23663991c88b6ca11f01359fd71f5b5d83b19168003bdc4d363aafff868b12a10c63d43108d2e68ea6fe34cf8cd209ad5ff603573f29e20665632732a29852bb4d67297fde7bfedf4aedf9d95f3444a26179b572b586edc80711cd1f1dc08f54b3c18d630173115b7a242cd394311addd8cde71cdeac2a147f264b5e19feb5b62fec89508c4ba97074bc079205905b48b086b4d804427926e60b563072d1db060b8790d946075d921b9bece063c1183ed799fa6e5eccbd0f2238f8c7474902b66cba2ba8ad9506b693040b5f731355592dca840e51427f6571476b72cc49679f6bf68b3de116bf723f9afb71ce27afd6d2142df0a45ba6aa7549df0f90d5bf99b52f86524be816061697aedf88be7cacf816ed8d3728b6c9c0c57a21476cc2fbfc07e21f7140281e5f2609eb2e8123bb2818cad1f65a9c8fdcd5a460e2f0329322963ad1acdae3723904bd914b8d5c2778148f84e06e66d59f547291fec7df5354e24a879816e9d9925d63704bbb03d98b230392b4453298396f15377d24021c588520bb63322d86f4feaa20af2efff0570afc6eadd7a2476b63fc76931056c82a8231e96e6dfc02c6f3fd5902513af799c8bc561a30787b655131ca030f9c6c0a27087dd913036bceb5d321ccf05c7d36dab5b7dba3e164988d3644d53d8a42a9fcbf4e3f1d36392ea05006000b43c544ba698205471e8933b6c84f1477383af57bc47c2947c8a087e635154546f32953eb37c6a0de3bfd7890a320d69b8ec0add716e30c20508cb8be2c96e4f61967ad8e26cb8b12560b1a4243700448e1c11848163cf1d7b0ec3658c60e397dbbc71eefa46a002f47a47fda23b334fcbc7f8db1a658004d1f75d6c4e449a14a155304e64a5ac374642014324ce9fb5e5c104d5f640c65aad3e9866e3e921986c162126bec5fe5453892ea2c215cc901ea3d67808acaeaacb6ed35654d4bbae7c2c831dff4f7704c35f32494130b1981a5feb9172bbdd92b8be2af8224c5fb2ded6539e143e729f32782821a13fd1072b67c59b02b31f375245610902f4be520863ac96ed4b390a8341c3484e0d2d7db015f4ce583af9952d92a2510973c102cb61fc4efda1348e656fae980ad8c5e57fd5fd37f83e56bb784cef183f026443be4ac8b21e568258b85d1d41420f8e05c95755e38cc17e23a8495a605c401a7a41fb3d54638ba9898823626055856e3f90760e6a531f04216356e3c1ea9bc61a199a4967b3eed70c716e04b50f63ba66446016af6f5cbaafb82b3461e2d7b7b2f19742908216a56f23ab0bf3acf11824c19f3f84d4d993ad8b7719797cd6cea15295241e7056b3941724631a7f74c039a3b17ba8c679d0e5a25c85098045ec62d6b2121bca9e0031bb3b551b4c9a1e9fd4a45fa6a9ca729577a2c713c4ab32c10730d87562ed91995cc9fca1d16c25c4be8b0cd0b5833218cbb0b0031dde32412d2ab18094b9de001de3e8b56da9a4bac98b046dd6da3264c4225a0cca27a8cbac5243a89275f894d2c1d5c37c8c563ce7e9ea94a7024755bb4b482241a20f42421da2fc7bac15ef0c3b84c7e54d888efdf152fa9c2620251490a1c6b2a9dadd7125b4c1e7be2ce7e03be0eef4f8047e062378bad5e4b0dd143cf9e67f7eb31cfcbf39f91c280de00f69d05899e21b45ce031cc4f35234217de61097548f89f4e0338e39cb74db8727d274bcb5af2599694a713f84f15b858c7590b25f1988628fd400e04e72b01728a3a0aad81ffbd123da88095b91f8ae6f54a238046d328bb5f5ca1e6ca81ec61ea6458928903b5164dda8e12210975c072f1f51768d1aa1f042a80c1f2c88f577fef9f134cf774ca019bc243b714b96bf47dc0b01cd5b82911d2918ac497a65dced43fc4b9c2fd33272ee465cb1ad4ad933cbd8b73bde5ea0937fd7dfe10dcb977f94962f6f20c05736ecfb3674424282ae8c8d3aa65053f0fa404f9bd0b48594c229ac9f788e5ab36e5dadff3d79a434d0531ff1593bc3c9cfd69611573d693b317e3bf60d847c7352a2c5ba9a4bb5296aca2c99b45d5d410c587f4f9ddcbc45e047651cc2cf1a6bee9de258cf963ede0a945f577bc93f34b3b2242d5cfdcdf3902a9f161a80ccc2a6836f3c082168425c0582818fd1ed69666a0b1f01001b597a474e2a1d92f42af57a9ef7ff55aa3d3820c160f6328de789fc1938d5a4af806b4a9ec536c6be536beb6f85f0122a51fc07793721314dfeb33587c23ca207d2146229a5206c3026f1c3d3e21edef208a30007a77e5d36040be85033ed4b0914d6d59c44ddff9de9ac63345a12fad87c4883b27561b14deb09b780b414755f266b64fa37de6019def468172ace3478a7efcff4d448433badf717ef22f8d14b650993d0ab479522acb3647e9859adf9b58353c0de0650c69a164e1d72d08a57f0ad32af7921425b4f9406f4a66fc2f04de6a7fa0ef7a0404020b085a085b7777abef989575bfad063ac6e8709de39120aec77aa1dc9367d8bfc9fa09749e931d213b49f659dd5a0f0852a5e5d54237d0269119bdeb4117327b82f4513d3877c7db2f4d571868f9cd858c8810a935a3024111da9b84d985692534b3ae236073acef2a6df9932f2552787bc9018bbeb125b744d6796d7ab2225f00f2f7c01e4fd984d2d2898e3cfc214adec0a61cb4a523833274b295e7fefe092b98361e20771d77639b781ecae5167a72df3f200ab34a7027666c79360f236080d1460a5341165eaec1b90031c76ae9b3d73a1cf43ab7f31e24b0b8aa636b52c8b435fa6244478491a8330ffc6a8fd87118592b4120d067d3b6c56c97432568fe4a1c45af557b2769346729d5153af9dcdb0c21a29eb47cdddeae3921ec4a039427fdf4647744388286db7a146aacf2ec25a3ae3fe129c9d3f4e53c3fa17ac48057afb3910685e4acf2e5daece7c62c59a8815aa11658712124b513ac5c44f8a7df6dd08604ec14fb034c3381a5bfc16c38742049e4a96d474286f6b205cbc9292db9218d7448ca3c3788429ccd617a08f072ed1ab2236b80f8d1fca71b64b10c624e0067acbbe82d2ec82f01cd25bcb013e73730d596edef071d9b33aac049c2ff02f94077e49092b1b8634c387e3fadcef333f973cb566f19499ed3a208296ec7061ecd8578155cd26280a2790e21961e555597fa18cfcfc8fe4e14db1b1b407c69a071339786b78734bb7e35327bea60e70f9d39c47826b678fb6d9fe4bc78defa994668ff5db9e893278b4cb7804b8dbd88c40fdf8974907730767e0c01e4c342ac43aefc0ce4cb86f951e49abb23cabeabe295e4f0544de26feee0e9c124a3b0dcc218c24809b69a74b0b2870bd1286d4171a6b3b38f9cefdfab6a6589cb65bd02c35715d4b73dac5440b10e2e6f1ef30b696daae9e3ea22d969cf38e46e6a3dab64d28d42b8e8013af66490e1491d0b83b379edcdc2c8a3a1b47af25a605e4757baedc4b15be89a4cc096134c02d47ac1ba763f39771c2f33256e977f32958f0173d3089e28e8a7769af4ecd6ea04e3cab3f118aa9a0f785a8fa08229c9cc2c85dcb5617c6b47e7c9233b459dfa7f9c6463bbb3beed13f06aca91a5c34d307b4a40a3987339dfb6bab2c879a883a2ebfec40e5c0d727a913d8af6af703481882fdd0b847", 0x1000}, {&(0x7f00000045c0)="063aaf6468d2a3dee83dd1416dfc3ba382e4c875d98f540105df16dcd5e24bb67b77529eab6ac30d5536b86959016b7efcc610ac62b33df1cd1c8c5df364a6b07044a486d41af6f13ecf3ed20e9c99c69dc05bb759e861ec28401ff4247dcd9c50fb13feb829cefb4dec1bd43ae776dfbbd973b6d48c0a6ed8", 0x79}, {&(0x7f0000004640)="ed8d10efc3547744c6e92e48e813c544b0c03e2df4c428c5f4c69cbf60835f3306b60ff6ebbf086e8907fa58299c3a73e99870ad54e81ffb5e94938154b676fd935c9522e8a27a55d324db0f36d6b63a3407378d31b63f375089d0d78ecec485c467095773ca338c14382406464be0c09f79c736e9a5ccae1d87f89c1a9744c23b8efe50b43b69928358e99e71019e5db443a2ff5b53ec61196f983ee6fc7649ace56f875a6638f033809ec4fbd97c5d5e404ada6c54769d6538596ca2bbc6ae45f78b9df7b19188b11a8e157d0d1984f53d6b19b8d72565a4214e21b579beffa05b55085cbc0a076a96934bab529f6ef9685bf39b3f09b0", 0xf8}, {&(0x7f0000004740)="dcc86f783f55d6511e2bc602e374e612de86f284c531e75b0dea79fbcfe07c44fe741e852290249a047200d50bace5b5cc76f75e0ed245593d8d87b297b56faad40e77c40f9e7719845cbb322e0ff0644cbc8b5553d9bfe7d03e2f51a0fcd908508ae4b2", 0x64}, {&(0x7f00000047c0)="91dc593b1873f87dd07cf23531b71c362afd89cab3ab7f3e91151e847c6aa22d033f9f99f39a1dbed534475aa9cf6bdb8583f8ae438c2e1f1bb1fb3d57b52368c11f928e074541c0695f8422b7b2387d247533038094240687526806120491fb3cb68699dc1025a0671859e2a187856ca19f76a61c898cf93210124dc660970fb77253683c8d374800365e87ba2bfbdcffd8ed2531e496be98992bc12f7451451ed76bedddb51ad411ba1381d8d241c0554de43b736496b1d7e0fa12507829d798cb518e00d0e9d76d82ceb3f094bf29eb38c5ceb82ff30dd2de0d95eb828c9fe2a938a0866bc0846bf8c12a4cfff61557d45d", 0xf3}], 0x6, &(0x7f0000004940)={0x28, 0x197, 0x1, "892a22f163502963c28f2186a081010c3a953d31005269"}, 0x28, 0x800}], 0x7, 0x40) r2 = fcntl$dupfd(r0, 0x4000000402, r0) ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f0000000000)=0x2d9) 07:03:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xc, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:03 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {}, 0x10001}, 0xe) r1 = dup(r0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000003c0)=ANY=[], &(0x7f0000000400)) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000180)={0x0, 0x8c, "b80ca79b6809a0c172afe226b97881cb59e9fa1769d5de58687ef539a30eba2505c6a5084b11c0562dbaa20ea79b2de11432c06cfd7b84f4b9ebcc9f3c7d57a71ecff0dc5b74b715b62b8ceb798b1040dfed4c56903090b75604d2b7bf9e68e010c2c78893f2a5b1e90897f2fb4bf3068fe3e97c8f3ba87ac413ac8f521f16acc33043cd60a86a0bbb862770"}, &(0x7f0000000240)=0x94) 07:03:04 executing program 3: r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x5, 0x200) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x200, @remote, 0x9}, 0x1c) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f0000000180)={0x5, 0x5aa}) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000000)=0x4, &(0x7f0000000040)=0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000001c0)={'vxcan1\x00', {0x2, 0x4e23, @broadcast}}) bind$bt_l2cap(r1, 0x0, 0x0) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 07:03:04 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r0, 0x26a}, 0x10) sendfile(r0, r0, 0x0, 0x3) 07:03:04 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) signalfd4(r0, &(0x7f0000000080)={0x4}, 0x8, 0x80000) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) 07:03:04 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') exit(0x0) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f0000000480)) sendfile(r0, r0, 0x0, 0x3) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@ipv4, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000001c0)=0xe8) recvfrom$rxrpc(r0, &(0x7f00000004c0)=""/4096, 0x1000, 0x2001, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=@delqdisc={0x1d0, 0x25, 0x100, 0x70bd28, 0x25dfdbfb, {0x0, r1, {0xffeb, 0xffff}, {0x2, 0xc}, {0xffff, 0x10}}, [@TCA_RATE={0x8, 0x5, {0x3, 0x7}}, @TCA_RATE={0x8, 0x5, {0x400, 0x101}}, @qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x6c, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x3}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x445758fc}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3ff, 0x40}}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x1}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xea, 0x9}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3, 0xfffffffffffffffe}}]}}, @TCA_STAB={0x4c, 0x8, [@TCA_STAB_DATA={0x8, 0x2, [0x10001, 0x0]}, @TCA_STAB_DATA={0x18, 0x2, [0x80000001, 0x1, 0xfffffffffffffff8, 0x0, 0xb0, 0x2, 0x7, 0x2, 0x0]}, @TCA_STAB_DATA={0xc, 0x2, [0x48d, 0x8, 0xa3]}, @TCA_STAB_BASE={0x1c, 0x1, {0x4, 0x71, 0xa63, 0x6f12, 0x1, 0x47b, 0xffff, 0x8}}]}, @TCA_STAB={0xa4, 0x8, [@TCA_STAB_DATA={0x18, 0x2, [0x1, 0x9, 0x81, 0x9, 0x8, 0x100000000, 0xff, 0xcd7, 0xffffffffffffffe0, 0x1000]}, @TCA_STAB_BASE={0x1c, 0x1, {0x7, 0x9, 0x10000, 0xc, 0x0, 0x4, 0x3, 0x5}}, @TCA_STAB_DATA={0x8, 0x2, [0x8, 0x5]}, @TCA_STAB_BASE={0x1c, 0x1, {0x9, 0x31e3, 0x100000001, 0x29a, 0x1, 0xff, 0x492, 0x3}}, @TCA_STAB_BASE={0x1c, 0x1, {0x3, 0x1, 0x200, 0x8, 0x1, 0x4, 0x4, 0x8}}, @TCA_STAB_BASE={0x1c, 0x1, {0x2, 0x8000000000, 0x0, 0x3, 0x0, 0x2, 0x1, 0x6}}, @TCA_STAB_DATA={0x10, 0x2, [0x7fff, 0x1e5, 0x8, 0x1, 0x20]}]}, @TCA_RATE={0x8, 0x5, {0x2, 0x15b}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xffffffffffffffc1}, @TCA_STAB={0x20, 0x8, [@TCA_STAB_BASE={0x1c, 0x1, {0x5, 0x23, 0x8, 0x5, 0x3, 0xabae, 0xfffffffffffff947, 0x1}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000000)=0x1000000) 07:03:04 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000200)={0x2, 0x0, [], {0x0, @bt={0x2, 0x80, 0x1, 0x1, 0x3, 0x4, 0x4, 0x2, 0xffffffff, 0xfffffffff3a47194, 0x0, 0x3, 0x1f, 0x3, 0x12, 0x10}}}) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'U+', 0x40}, 0x28, 0x1) r2 = getpgid(0x0) process_vm_writev(r2, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/148, 0x94}], 0x1, &(0x7f0000000700)=[{&(0x7f00000003c0)=""/17, 0x11}, {&(0x7f0000000400)=""/207, 0xcf}, {&(0x7f0000000500)=""/176, 0xb0}, {&(0x7f00000005c0)=""/33, 0x21}, {&(0x7f0000000600)=""/103, 0x67}, {&(0x7f0000000680)=""/72, 0x48}], 0x6, 0x0) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000180)=0x7fff) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) listen(r3, 0x49d) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, {}, 0x10001}, 0xe) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000080)=0x4) 07:03:04 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0xffffffab) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x80000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000040)=""/41) 07:03:04 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xf, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:04 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') sendfile(r0, r0, 0x0, 0x3) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) 07:03:04 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) signalfd4(r0, &(0x7f0000000080)={0x4}, 0x8, 0x80000) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) 07:03:04 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) signalfd4(r0, &(0x7f0000000080)={0x4}, 0x8, 0x80000) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) 07:03:04 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x4000000000000, 0x0) sendto$llc(r0, &(0x7f0000000300)="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", 0x163, 0x20000080, &(0x7f0000000140)={0x1a, 0xfffe, 0x98d1, 0x5808, 0x80000001, 0x1}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080)={0x3, 0x200}, 0x2) fsetxattr$security_ima(r1, &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0502010000e6028c006c4d77b686004e4dedae2d1446e3167665236b53abbaa67c1926d5eb345ddded70b7c6f9ec3dd215375999f86a1a89dd25d80f4c86ebe04f96c7a2ed1b80f7e4ad15f44c7f546693ade3f3a6a53d0928d6c9a885eafa2375736129871fbb25fbf4aa388abc547418e68a1a"], 0x76, 0x2) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f0000000040)) bind$bt_l2cap(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000280)={0x6, 0x200, 0x2, 0x8, 0x0}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000480)=@sack_info={0x0, 0x401, 0x7}, &(0x7f00000004c0)=0xc) sendmsg$inet_sctp(r0, &(0x7f0000000640)={&(0x7f0000000100)=@in={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000200)="1f9b0a8e4b652b", 0x7}], 0x1, &(0x7f0000000500)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0x2}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x77d}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @dstaddrv4={0x18, 0x84, 0x7, @local}, @authinfo={0x18, 0x84, 0x6, {0x76ffe135}}, @sndinfo={0x20, 0x84, 0x2, {0xfaa, 0x6, 0x7fff, 0x819, r2}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x8}}, @sndrcv={0x30, 0x84, 0x1, {0x2, 0x101, 0x1, 0x800, 0xfffffffffffffffe, 0x8, 0x8, 0xc8e0, r3}}, @authinfo={0x18, 0x84, 0x6, {0x3}}], 0x118, 0x800}, 0x4000) 07:03:04 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x3) 07:03:04 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8, 0x4000) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000080)={0xb, 0x0, 0x7, {0x9, 0xfffffffffffffffa, 0x100, 0x7}}) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {}, 0x10001}, 0xe) sendmsg$nfc_llcp(r1, &(0x7f0000001580)={&(0x7f00000000c0)={0x27, 0x0, 0x2, 0x3, 0x800, 0x2, "2c46896aa9453f86b4aaa889b1aa3e56a3a326357ec2a5ec5ece8154ff1dc13a5b443a52d6715cad70474b100becc92e70d968f4903cde947c323a4a695d42", 0x7}, 0x60, &(0x7f0000001500)=[{&(0x7f0000000140)="88b6cc9323c70d0f2042de7604b85f7cdd81843f7e32f3e9a05a00e79ea50d9ef3ec71efe519257eb81a1570fdc718e0963193c9958e9918e41143ecf1841821305b51054b8c24720c212c9557f40f55", 0x50}, {&(0x7f00000001c0)="a64b63c4204f3c0e2e2aba568cb66a96a9c8333ad810e5a09dff0ea1156ce73fc99467382f0ec8ead20a", 0x2a}, {&(0x7f0000000200)="78f5cdb45a626087b29bdcd83e2d53ab2f01d8fbf73b96449b4e95eb252a9df298fb945d8e9dbda56ccca4d4c7cd92894259597c80e2a62465613355243cf136eda722259669a84de80e25a1f78ccf3c86084db698e1d284ad832e8c16c7aae14595d209d8d6ca1d543102e84b37c07bd152c6be828e5570454d82493750a28699207d41fb2ec2a7ec4d3c728d3f8098bbfd420e09303c382289e0b6183ca3b7b1e4d38193c45df9899c61c7d635f629794da34b2acfc94b068eb0e7b1c663e958c49c73d5d0f8", 0xc7}, {&(0x7f0000000300)="8ed33263b4676fcf457504a087608bdd1d99e3147c631ec969b4fe062209ee766eb6c044b98912dab07350f045361e90050c41278f1d7da99154d69d0b6a85ae63debb9b529a13aa8a9a3a648e71f1806a3df6eea863cc3e5a40732483436fe0fcc00609664374943476785001df15c5fd51cc732ebe42e47dd4e1a1588298688f957357d56b04ce19ac521986b260078db62b099c9aef6d9ad7069a6e15ebf4825c02dcfa8b1189356ea4183ec71a44fbc72d3dbdee1349ff94cfcd8766cde67370a621793d171d4dc4ca66d808e77201e71b16f02ad712a1e5343eaefedd0ee8ae386c3bc079ec4017bce59bce56360da913e740e2f3a8be7db31f60062a9b0ae321fc2fc12b7fd52d0c598c2ed8ad1422cd4eb43d1d3b63683c12afa7a26a532252439059e4a208e7e6f1f0c264ef5d0d5ccde3ad7584ca968d756ffe51330003d45a07254f107326e36fb5f07cc89a5563d3bd82f664afd6265ed69a921d15c2320644d55df7e5a6a43744d2807d0f277b5d951cae0a3dfda9b32811c4b663fc5f6d899ba581ad123c19d1664b823b996d081f4e60d282730eb2a1384e3cdfcce37fb4cc9bc86891129dde096381e0a887a0ce9286a6e6c30b61beab93bf18c294c0c7ff486cc67f7676f1edc8013b97ad975767e53942e32d73b3c0160d14f973ea53773324c83ac707c35b810c9bfe75e24d81564cf519ed8603ef00591e58e0d3631235b966400b0990a653ade54233c482c9e1a9c1d15bcf01787b141fa1614ee76f3a604a6c98784ad23082206c5ef5fb423eb7249bac43eb795ec6b7344252f75dfb19cff56657c1768c021ab2c937435feaeb8448f7db7ca46f0a9ccdb8173a2c513bd9b476adbf6278b0b7f9d6ae69629fc6abe3adc6413349ee34cf6c35e6a8f75f7e8eedefea46a1cac3a523ee8a064536d684af48845715ae61f635bfa332f8eb6cbcd79d2492b8b979d6ba8ce2810af609dbb696e14dea6041e7b2ede44327ba1c5f140c41d4709011e535c37e09e4c541a821cff889555796afef83035b35fee695fdb32613c7a4c340030f8443e4cdfccfd4351daf5004699ddb6f6d5e0a8bba9a312c4e1e33fb204c959dc2765c344d360d93705d8cc61e8b63ad019ae62f6d8c3733d7e8eb7dfc3ab85278be81dc457eaa467728e0183158d89ab6752e7fcfe081471242b06b6fca1b8334ea05b9978314c75dec1197e53caff9f86fdfbf1890a283095451832c691c6d545868b4a416c7255461ccccd20a3d67084e05a7ae92d59d89a523a6fb919d4fe25c2cc1f60b045ced3b7aa2cd97ff2b14d917b95db9f46538001faf03c4caf2429997a8c1931bae37b6b0ce7babdcff623f78f09dad12fb6961cbf987bd44470a924e65b8c6133d1d068ad48d7153be5e248b91d77dc1f336430c91f104b70ed1642eb772f5489eeb754fa770a7bfb8db200b4c5f0e6db33f803031adf03daa02f305f14fc5fbf0d7e1dd4cbdb50d5c9d0ae323b4c4acff80385ec85ecb23bb14e6d329139b00eaf4eef600776f250cc9abe34a170c866ea2f9357c17a63b261b0cc12498bd678536139bcfc44f9e7e966aa36cf9a38da46db199f6d9180032c2da19a190745fa3fc856971258eb803dc8fb8b2213d8f12f885e4ed38300038aa470629435ad5c017e76bdada3ee494acdd75fbb65c63c6d3793d955497ce438bffc59b0154957009a70bbb7dbcdc051e94d5705d3740da11af6668c7525a4661010624d34a74542fb24f00c8f3f32aef02f2ccf3a6b5fd84bfd04d79b160ddc5a45b611687c5464a4bf26e8826c45a41ca4f9a7449926c31a42ec97e2b33a239e617142815a44e0029e172185fde21ed29ae225163d23dc44872ee31f3788b6681d024cbd694a489d68ff5774d4f26174ae4b9be104e27febc93b9407a7fa950ae79df1aeb42a31df2fe9e1af316a98526977bbecae9b5a36a0fbc1c59ed60f4f39ff1a20736fd02fa78b8813dc602cca909862dc7a8378ce70365acdee031c25e6bfe31cc84073bd89e154610cbb6add8c6d50ac5a1e802c753dba5f6c2197fb2960d7ecb23c1b2e41023d10491c7b26bbede2ca4d89ec45b2b3725992a305d86497a86255d953bde7c397304ba629467a9b4b6a9e7fdf952584b926643d6871cc3e8d8f803a239fe619ee579dc74b7dc5db81b0aecfd4669faf533521806f4d872102e90f8c923e172aa755a2a95e1b2d7b4c23a110eafcc22682f5ca7e9b43c8e67e864a0ef434f1cff5f84b1d7b0f213a8a18dc9cae8966881f92f5c208a450256af07ae3a9c4e640361ff325bc95bfad8ee879e81244d23ab8f579d189d8a18e641babac19780b6cd7129b68b6ad71653b64e06b73661c2d684a4f8dbe8a0d21c212eb29d2582e77ad4d1ebaadda5a9830bb73a26007055b6bb8237e6c26ffd5f93714ad8fc9e97172a43745883231e90b00c7091724cdbea3cd23653a1cc0c4f528b48d4242dcc51c5dd9c06c016396ab71637551b1fcbb469733d64a99b90ec0e8c6affe5652d338a76fbefb3fc177a453cbed61c7794b636b4bc67737d785f0db07bf5a5512578b20f58369bca48d0476e6a0979894a39fdcfa08c97e7d7abfe378e40c0ffcceb5c238797eba708810d9e6224ae149d96b1bf62767b0b54292f66d31415da04f0a7bd8a9eeadae077a04173dfdeca17e22f94a16c41e07022ed93d59fab05bf3c0b6d798b414bac694a13f77f0a096fe8c0eab51d0c3bfbe22a4af38f8dc6563a24d3cb0f25cd5a912c7055b159b83c28f4547a3b585685c36f4d5b5819ff0e6fa9d22bbc0d5aeabb297c27ed420b5ab37118a3694b2214c097e709728bea055d2802d403fdab523a17fbc3d4bb2793792fa60e5e652b156a363b1d722eba3512c53429eb3d70709bb2b0756cc63940d2294c8f7aa24a0a964569fd71bb2c9a66bac77b6fd2325ba403e64f4050d1894a11dc40b6bde444cff5a404a6e7f5c2bd3eb73135f4409c8e54e6348893194b5f529ff90eb3af90e17910409c2310b3820f8d341a53d9c46f341b641a7e10d03743bfc47f765dea0e07990b96c150758c3d5a2a831f1894325dfea1856bce6eef98b2562ec7cfb295cdea023ace2709ce6c72c1651020e39d6ff414db26f5474f6a81f4565528240998dbabf1ffbebc9d2726af4496522e734a0dcf80a53daa9ec746eac84625412b75e43ebe6ef9d8ccdd28a30e406276ca0f9d9f40d34ec0890220debda3cfc77468ca98e857a3a1674b1a50eb040eaf202271611de38370f094fc1bec5a3acf040cfc89710b5d516b159ea5139dc0dbbba2b5fa6fbd9717d638f11b1d3bdf82ae304bba736e1d224f28ade300ccf64efbe52dfa1fc6b3aa2c307c1cdbd0842dab1abee51aeec04dd6d54d8fad0bca29d61d38e75d13b7c6e936cbf5a898cb38d120b010096ca38883479bf65f49bf2e327d71a385200c8a725cdde7c26bf6c39369ec3f618538baca121f4942d6d051c033300fb14f6bbdba8ecfe93d70644a120343082ab52ae6ee0df51fdf30359fc54a0bba89bc17a0ec32c992f02407751c0620ad7b866579b60b41d22c14f38e8b3f6c6348c7dee198b69345b0493c44a115022d2d062a89e55dce30048bfe61f4e5bd7bf1a193cb95bbc556a84189d21e6d7ec97b1cf2f219c3bfb8284745f5f98133eacc7c6511c284b907f036b28172a2ac288559c2f43fd90df518c88e1999a9f320769b019752f5370c492ce161853603a028d9fbc56f615a67594b4120df5b8f2bac532f93772265c832f815616f3f1aa9a289ae1d81b1b23bc8dbf3703cb76ff061daf5ee995f8751b4438d8f24d781178b7ae2c9c92a8d13db020784187a9e75d27bd0970c6a0b2efcf166b1cbd174cc33c102edcd48c3ea3c1735d47e2d675d863a866229aed174953c1a43a65e56a27cda31a4dd475d4db209b939d31ba7a61949f4541268626f99fcc6885c7641a73170d1ad4e0a77f856d02dd9b49529dd53224d79f3665124852caf07f9cf90af7aaf5e31f3bc6a0aecfb70fc1d2c3dff6fb8c790b960ad87fe4e88716bdebff259c55431efeb27c84852ac7d901042ecfcd31a4cf760b7cb99e89002816341dc771a3c68e26d46221058db0184f7982083ab4aec596b7d46c2941b452cdce501360aa49aa915c77865f2d3d1032539896739a1845672cccf76a75da1a08872e35e7ffd45174743881daa92887551d1a1de3e240ffa464669e4602fb29fd660b96393c8a66d59fab939c71b3cce03b8d1dfea88ec24993d6b82084f06f42f3e71c92ac309a9c4a430be556b4dc01801dbc28865a400bb2e1fb8a8cd4da3bf5a092b5203bf6732b2a446694d87bb8c86f3f79c2d8c3b1ef4b569ba1a3fddf79d54937e093c86e9853054bbcc7452058a196c92504b63bd4f5b2ff3718c033ed9b885d4327d9bfa32da9bf1dc14b0d84108ba37a7ede88231d81285974d92923e6ff3265dffa9c591bb56974985e73fde337e0be5d224a8c3ef64992af96f02c0133d759d64af1924a68d078a15c660c6b17d9c1c671e621db8ae18744574b04dbfe32a2ee05e6468e59805c0f64b93a8e87e5f164f3a4e538db4ff0c18bf78f1f97ad904947155ada0b526800f0e2f010c0c92263fc9d2212cb14f288a7ce9ad5a5a8d08099dd6d4064675788cbe641fa04cbf195d68311558734be48f2442308c55a5522fce8ecf0a22c02de5c742342d84fcea0f2a7360ae96ac1b19582f59b9b5f98afad4fe0831cc9e8e996d4554248e19e032ea575d1b6d6ffe73d3a8a807f49d362d92c10a0165e82d44a8aae4f3027a2944e6fe6accd6627a398bf27f73788be4f6f85f7b87a83f5e4be3bc709192419f5065fae916e8069f425578ef59e2dc3dd98f8fb2afebd5964825ad012fcb050557c45da123f41678f5f386522077d2ce0b52462b650b5b950455b69d4993fe762541162f01cd290742598c6f2002bbc8f8bc817163e58f01900f579975a4c5c55e00ee9b7034d06cadebf3303817b12dd054914a871f84202cafb5731494fb125f7c6aa64bada317181431477d1f490430a4acb9330306d459e1f5e30ecb7ab54d7515f7b36b5173ccbb27fb98c04ca35769252c9a76b1e9ea1d100038a43de6ae93126a8a391ca583c8abb61e4f52228af68f881c70d8bcbf8bd5836a8f5a4237e9c1e0c3aa3235d10303b31045063a907698a3b03524e935c512e57710a6182014ec15e441c37e3c43811004109b7d263aeb2a3ed1b47bf148e0925beb3328a096deebe1a35c629986fe668704fe82a152f7373d15d02b29cd358f0d581ebfb68d831e3deaa3a9289794259170f0fe1fead2d1869816afef8238bfed2ce88deda17f71d6fc10897193cf6ad6ea4229757724942977bee5320eb2a5aed433184c327149f9a093c994ddfd75573ec2dc71c3e44f3f506e9963acbd19c6dc36993f7ef7396e33101e93d2d3ee5ee8cf0f26a223b5acd9eb6081fbbd34082be78b6d2a8b51dde99f3b66d3ca6b5bc6ad4683856818b0ffb2a864e7e84c02dd68af8bbc0ce7fc675467e001bc62d910e18911c5b8cc0383d718fd143830370d2f166503d746395d503d42641ecc9a709ba1ed1f1c1de283d05dec8198a69f1df0cd677e980697add0274e99f0e786f92260bb62a1e051cad1a10a446af268012d4268a0bcc30e9f8f0ab61b4da907983c14b716080ac77c49ee8ce40825b7d20f41641ad4e9ba8c375804677191a2ca69c21c7c532f5cab9358ae1e95ff36dcf09aeed218478840f0b4d9b961d21c80a23e6a93", 0x1000}, {&(0x7f0000001300)="5435981f4a7b470855b5e81d87f3e51c6958b0f3ef1bdd1c81a42e55c0f05a1efd34a02eea6b489323ae2d0f143e93e97d45984c752cf54bb958b7e0fe741371610acbeb1c46dfff57d90cc2ee2cb3c65417cbbc95", 0x55}, {&(0x7f0000001380)="4be19953387540eb023cae48d5e4cb2d54c52ffe26bd6c3755f7a4d4250fd0f084b0877f8a2f71bdea473b5a53645771d8574a35ff89a657fe2954269837b6f5f1407bc4f606b476706a90b3241d5b76e03b594a7c43648a8400a2a40ef77b376e3cbeb901436cf93289c4", 0x6b}, {&(0x7f0000001400)="c4", 0x1}, {&(0x7f0000001440)="5d29a42bed4c8bfb85320df50c36524f367b4f4412ba6e0829a1e4facc7dd5f20a58fb6835d3b90e2cdead841c04345e91ece50a555c596b1a810f486e2a3b4058cbedb29bc1f8fd5d2fb36f0cb7f853d4d2ef597a7e321848322baf0909050e91d0d531c6572f87a534fe544232d54c23a434a8680ba86378a7fe1bdac97ed1a5ea52486eb3052b9ea9e8919e1ec2334ad0a63d6b0434ee7a7879aff542a1e520184b71e373fb21cf801bc343b3fd63eb", 0xb1}], 0x8, 0x0, 0x0, 0x41}, 0x40) 07:03:04 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x10, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:04 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {}, 0x10001}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) [ 563.900383][T25735] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 563.920391][T25735] FAT-fs (loop1): Filesystem has been set read-only 07:03:05 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') exit(0x0) sendfile(r0, r0, 0x0, 0x3) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000000)={0x10001, "72ba638ce1f3f41040a8bf50d9f7fa80b6912c13b277601ba16240cf534a5804", 0x2, 0x1}) r1 = add_key(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="134e1b1b6eff0b2333182e2324f8a68e352581362a137992f4", 0x19, 0xfffffffffffffffd) keyctl$setperm(0x5, r1, 0x12008) 07:03:05 executing program 5: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x0, 0x20100) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)=0xc5a) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') sendfile(r1, r1, 0x0, 0x3) 07:03:05 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x20, 0x80000) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000280), 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x8, {0x0, 0x612, 0x2, 0xc, 0x0, 0xffffffffffffffff}, 0x8010001}, 0xe) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000100)={0x6, 0x118, 0xfa00, {{0x9, 0x8, "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", 0x5, 0x8, 0xf4cd, 0x2, 0x1, 0x100, 0x4, 0x1}, r3}}, 0x120) 07:03:05 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x400000000000, 0x8000) r2 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x4, 0x0) clock_gettime(0x0, &(0x7f0000001a00)={0x0, 0x0}) recvfrom(r1, &(0x7f0000001b80)=""/50, 0x32, 0x0, &(0x7f0000001bc0)=@generic={0x0, "6d0d7ec88472b17397874ff05b1d574687e83c2d2fffaf48674ba488589508ac31d4bf2552f368fbbe903af0265621fe5fa14d771139237356c4747da12084affea9dbdf3b50c2ee4156c21465d7c615cd11b58689b61d88a7195c1236abbc5355314d442807083c5dd7fe2e798e676f1f11cf9070b466b2bbc4b5eed1f7"}, 0x80) recvmmsg(r0, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000000c0)=""/189, 0xbd}], 0x1}, 0x7ff}, {{&(0x7f00000001c0)=@caif=@rfm, 0x80, &(0x7f0000000580)=[{&(0x7f0000000240)=""/235, 0xeb}, {&(0x7f0000000340)=""/94, 0x5e}, {&(0x7f00000003c0)=""/21, 0x15}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/212, 0xd4}, {&(0x7f0000000540)=""/47, 0x2f}], 0x6}, 0x23}, {{&(0x7f0000000600)=@can={0x1d, 0x0}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000680)=""/5, 0x5}, {&(0x7f00000006c0)=""/78, 0x4e}, {&(0x7f0000001b00)=""/68, 0x44}, {&(0x7f00000007c0)=""/178, 0xb2}, {&(0x7f0000000880)=""/32, 0x20}], 0x5, &(0x7f0000000940)=""/4096, 0x1000}, 0x7}], 0x3, 0x10000, &(0x7f0000001a40)={r3, r4+30000000}) nanosleep(&(0x7f0000000740)={0x77359400}, &(0x7f0000000780)) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000001a80)={r5, 0x1, 0x6, @random="3e29c3f7d6ff"}, 0x10) geteuid() r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40100, 0x0) write$P9_RMKDIR(r6, &(0x7f0000000040)={0x14, 0x49, 0x2, {0x40, 0x3}}, 0x14) 07:03:05 executing program 4: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, {}, 0x10001}, 0xe) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000), 0x4) 07:03:05 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x12, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:05 executing program 4: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, {}, 0x10001}, 0xe) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000), 0x4) 07:03:05 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {}, 0x10001}, 0xe) 07:03:05 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') sendfile(r0, r0, 0x0, 0x4) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000040)={0x400, 0x1f59eff6}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x1, r0}) [ 564.536480][T25748] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 564.536503][T25748] FAT-fs (loop1): Filesystem has been set read-only 07:03:05 executing program 4: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, {}, 0x10001}, 0xe) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000), 0x4) 07:03:05 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000140)=0x5, 0x4) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000040)=""/7) sendfile(r0, r0, 0x0, 0x8) io_setup(0xffffffffffffff00, &(0x7f0000000000)=0x0) io_getevents(r1, 0x11, 0x4, &(0x7f00000000c0)=[{}, {}, {}, {}], 0x0) 07:03:05 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x18, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) [ 564.807922][T25780] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 564.825875][T25780] FAT-fs (loop1): Filesystem has been set read-only 07:03:06 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x7fff, 0x40000) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa4, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffd}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x584c}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x100}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x200}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1c0000000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x40) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs_stats\x00') exit(0x0) write$P9_RSYMLINK(r0, &(0x7f0000000240)={0x14, 0x11, 0x2, {0x80, 0x3, 0x1}}, 0x14) socket$inet_udplite(0x2, 0x2, 0x88) sendfile(r2, r2, 0x0, 0x3) 07:03:06 executing program 2: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, {}, 0x10001}, 0xe) 07:03:06 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') sendfile(r0, r0, 0x0, 0x3) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) 07:03:06 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {}, 0x10001}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) 07:03:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x1e, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:06 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r2, 0xa}}, 0x10) bind$bt_l2cap(r0, 0x0, 0x0) 07:03:06 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) modify_ldt$write(0x1, &(0x7f0000000000)={0x5, 0xffffffffffffffff, 0x0, 0x7, 0x800, 0x3, 0x0, 0x81, 0x1, 0x2}, 0x10) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x2000000000000002, 0x621a00, 0x0, 0x0, 0x8000000000}, 0x4}, 0xe) ioperm(0x0, 0x5, 0x7) 07:03:06 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000040)={0x4, 0x3f, 0x1, 0x8, 0x0, 0x3}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') sendfile(r1, r1, 0x0, 0x3) 07:03:06 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {}, 0x10001}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) 07:03:06 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000000)) 07:03:06 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {}, 0x10001}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x101, 0x12800) ioctl$SIOCNRDECOBS(r1, 0x89e2) 07:03:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x24, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) [ 565.762378][T25824] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 565.770274][T25824] FAT-fs (loop1): Filesystem has been set read-only 07:03:07 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {}, 0x10001}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) 07:03:07 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000000)='oom_adj\x00', 0xffffffffffffffff}, 0x30) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='oom_adj\x00') sendfile(r1, r1, 0x0, 0x3) 07:03:07 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x3fffd, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x1, 0x0) mq_getsetattr(r1, &(0x7f00000000c0)={0x1, 0x5, 0x2, 0x7fff, 0x3, 0xff, 0x100, 0x560}, &(0x7f0000000100)) mq_getsetattr(r1, &(0x7f0000000040)={0x8001, 0x8, 0xffffffffffff8001, 0xfffffffffffffc01, 0xfffffffffffffffe, 0x3ff, 0xd, 0x8}, &(0x7f0000000080)) 07:03:07 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x1000}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={r1, @in={{0x2, 0x4e22, @rand_addr=0x8}}, 0x9, 0x5}, 0x90) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0xffffffffffffffff, 0x0) ioctl$RTC_UIE_OFF(r3, 0x7004) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x10001}, 0xe) 07:03:07 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') exit(0x0) sendfile(r0, r0, 0x0, 0x3) 07:03:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x2a, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:07 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) 07:03:07 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) 07:03:07 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, {}, 0x10001}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) 07:03:07 executing program 2: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, {}, 0x10001}, 0xe) 07:03:07 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="050002f2004c000600"], &(0x7f0000000080)=0xc) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000240)={r1, 0x6, 0xfd, "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"}, 0x105) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in6={{0xa, 0x4e24, 0x10000, @loopback, 0xfffffffffffffffa}}, 0x100, 0x10000, 0x403, 0x80000001, 0x3}, 0x98) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000180)={0x0, @reserved}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000003c0)=0xc) ptrace$getregset(0x4204, r2, 0x6, &(0x7f00000004c0)={&(0x7f0000000400)=""/134, 0x86}) sendfile(r0, r0, 0x0, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) [ 566.445778][T25837] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 566.475537][T25837] FAT-fs (loop1): Filesystem has been set read-only 07:03:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x30, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:07 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000040)) 07:03:07 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, {}, 0x10001}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) 07:03:07 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x185040, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x20}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100)={r2, 0x4}, 0x8) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x1, {}, 0x10001}, 0xe) 07:03:07 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') sendfile(r0, r0, 0x0, 0x2) [ 566.724019][T25860] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 566.788382][T25860] FAT-fs (loop1): Filesystem has been set read-only 07:03:08 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') exit(0x0) sendfile(r0, r0, 0x0, 0x7) 07:03:08 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000000)={0x2, 0x6, 0x2, 0x8c, 0x394b}) bind$bt_l2cap(r0, 0x0, 0x7b6645615eea7614) 07:03:08 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, {}, 0x10001}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) 07:03:08 executing program 2: r0 = syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x8000, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x3) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, {}, 0x10001}, 0xe) 07:03:08 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x2a, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:08 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x36, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:08 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) 07:03:08 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f0000000180)) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {}, 0x10001}, 0xe) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000080)="ccd2fe7cd564f453dad97e936e91295da53b63e184ab0f8c38d3df9e9979686e58c49fc0f07459935e24670d5b1a6c6489742023824075c936263d2ecf1e666a118797e1c14ae8fa3cac8106cadeadc153a1460aff2c05943650b9d7fe1dede7c000ad815b7f4d59c86ef90f7ca1fb6335d2a8d2b1e2cbb59b8269081ca65a991702bde3462512862e9da7dc41fd1fee2856116dbd7e95705d1563b589e6e2c8db7b32c3f1133768d3d7accac5e100827745c25351") ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f0000000140)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default}) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f00000001c0)) 07:03:08 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x101000, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}, &(0x7f0000000080)=0x10) 07:03:08 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x3c, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:08 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) 07:03:08 executing program 2: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x2, 0x101000) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x7}, 0x10001}, 0xe) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x80812000, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000080), &(0x7f0000000100)=0x60) [ 567.385942][T25885] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 567.421768][T25885] FAT-fs (loop5): Filesystem has been set read-only [ 567.605756][T25910] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 567.615870][T25910] FAT-fs (loop1): Filesystem has been set read-only 07:03:09 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x8000, 0x0) r1 = socket$inet6(0xa, 0x800, 0xfff) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') exit(0x0) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f0000000000)={0x3, 0x6}) openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0x100, 0x0) sendfile(r2, r2, 0x0, 0x3) 07:03:09 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) connect$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}}, 0x24) 07:03:09 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x2a, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:09 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) 07:03:09 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {}, 0x10001}, 0xe) r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x8, 0x200000) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000100)={0xff, 0x49323159, 0x1, 0x1, 0x3, @stepwise={{0x1ff, 0x6dd}, {0x0, 0x1ff}, {0x3, 0x7}}}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000740)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@local}}, &(0x7f0000000840)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000880)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x59, r3}) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000080)={0x4, 0x8}) 07:03:09 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x42, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:09 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x27, 0x42880) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) ioctl$TIOCNXCL(r1, 0x540d) bind$bt_l2cap(r0, 0x0, 0x0) 07:03:09 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) 07:03:09 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x8000000000000}, 0x10001}, 0xe) 07:03:09 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x48, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) [ 568.315691][T25927] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 568.338616][T25927] FAT-fs (loop5): Filesystem has been set read-only 07:03:09 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x42, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:09 executing program 2: r0 = getuid() quotactl(0x5, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)="a85c241bcc8001cbc84b4a231031eda212dd746013f73cb4") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, {}, 0x10001}, 0xe) [ 568.523177][T25945] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 568.551142][T25945] FAT-fs (loop1): Filesystem has been set read-only 07:03:10 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') exit(0x0) sendfile(r0, r0, 0x0, 0x3) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f00000000c0)=""/164) 07:03:10 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000), 0x4) 07:03:10 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x2a, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:10 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x220, r2, 0xc09, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2ae7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4be}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_LINK={0x74, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x54, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_LINK={0xe4, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffa}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2a04}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2c7c}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x20044004}, 0x4000) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {}, 0x10001}, 0xe) 07:03:10 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x4e, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:10 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x3c, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:10 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000), 0x4) 07:03:10 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {}, 0x10001}, 0xe) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000080)=0xc) [ 569.273876][T25963] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 569.283990][T25960] FAT-fs (loop3): error, invalid access to FAT (entry 0x00006500) [ 569.292780][T25963] FAT-fs (loop5): Filesystem has been set read-only [ 569.300796][T25960] FAT-fs (loop3): Filesystem has been set read-only 07:03:10 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x54, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:10 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x3c, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:10 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x2a, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) 07:03:10 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000), 0x4) [ 569.724637][T25989] FAT-fs (loop3): error, invalid access to FAT (entry 0x00006500) [ 569.738703][T25989] FAT-fs (loop3): Filesystem has been set read-only 07:03:11 executing program 0: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f00000000c0)='net/ipx\x00') exit(0x0) sendfile(r1, r1, 0x0, 0x3) 07:03:11 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {}, 0x10001}, 0xe) 07:03:11 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) 07:03:11 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x5a, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:11 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x2a, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) 07:03:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x3c, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:11 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) 07:03:11 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = dup(r0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000080)={{0x2, 0x4e23, @rand_addr=0x10001}, {0x6, @random="c81a3d3f7c2b"}, 0x62, {0x2, 0x4e20, @remote}, 'irlan0\x00'}) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'ah\x00'}, &(0x7f0000000140)=0x1e) inotify_init() bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {}, 0x10001}, 0xe) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000000)={0x3, 0x3, 0x2}) recvmmsg(r0, &(0x7f0000006e40)=[{{&(0x7f0000000240), 0x80, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/98, 0x62}, {&(0x7f0000000340)=""/108, 0x6c}], 0x2, &(0x7f0000000400)=""/4096, 0x1000}, 0x100000001}, {{0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000001400)=""/63, 0x3f}, {&(0x7f0000001440)=""/250, 0xfa}, {&(0x7f0000001540)=""/4096, 0x1000}], 0x3, &(0x7f0000002580)=""/177, 0xb1}, 0x4}, {{&(0x7f0000002640)=@xdp, 0x80, &(0x7f0000002700)=[{&(0x7f00000026c0)=""/25, 0x19}], 0x1, &(0x7f0000002740)=""/163, 0xa3}, 0x2}, {{&(0x7f0000002800)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000003c40)=[{&(0x7f0000002880)=""/4096, 0x1000}, {&(0x7f0000003880)=""/211, 0xd3}, {&(0x7f0000003980)=""/23, 0x17}, {&(0x7f00000039c0)=""/64, 0x40}, {&(0x7f0000003a00)=""/62, 0x3e}, {&(0x7f0000003a40)=""/88, 0x58}, {&(0x7f0000003ac0)=""/39, 0x27}, {&(0x7f0000003b00)=""/107, 0x6b}, {&(0x7f0000003b80)=""/192, 0xc0}], 0x9, &(0x7f0000003d00)=""/184, 0xb8}, 0x6}, {{&(0x7f0000003dc0)=@in6, 0x80, &(0x7f0000004040)=[{&(0x7f0000003e40)=""/245, 0xf5}, {&(0x7f0000003f40)=""/224, 0xe0}], 0x2, &(0x7f0000004080)=""/107, 0x6b}, 0x2}, {{&(0x7f0000004100)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000005480)=[{&(0x7f0000004180)=""/211, 0xd3}, {&(0x7f0000004280)=""/4096, 0x1000}, {&(0x7f0000005280)=""/97, 0x61}, {&(0x7f0000005300)=""/27, 0x1b}, {&(0x7f0000005340)=""/8, 0x8}, {&(0x7f0000005380)=""/59, 0x3b}, {&(0x7f00000053c0)=""/158, 0x9e}], 0x7}, 0xd0e}, {{&(0x7f0000005500)=@nfc, 0x80, &(0x7f0000006b40)=[{&(0x7f0000005580)=""/83, 0x53}, {&(0x7f0000005600)=""/4096, 0x1000}, {&(0x7f0000006600)=""/163, 0xa3}, {&(0x7f00000066c0)=""/203, 0xcb}, {&(0x7f00000067c0)=""/250, 0xfa}, {&(0x7f00000068c0)=""/44, 0x2c}, {&(0x7f0000006900)=""/209, 0xd1}, {&(0x7f0000006a00)=""/110, 0x6e}, {&(0x7f0000006a80)=""/172, 0xac}], 0x9, &(0x7f0000006c00)=""/197, 0xc5}, 0x8}, {{0x0, 0x0, &(0x7f0000006d80)=[{&(0x7f0000006d00)=""/103, 0x67}], 0x1, &(0x7f0000006dc0)=""/85, 0x55}, 0x3df4}], 0x8, 0x0, &(0x7f0000007040)={0x77359400}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000007080)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@empty}}, &(0x7f0000007180)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000071c0)={{{@in6=@loopback, @in=@multicast1, 0x4e23, 0x2, 0x4e23, 0x0, 0x2, 0x20, 0xa0, 0x6, r2, r3}, {0x8, 0x2, 0x8, 0x200, 0x81, 0x77f, 0x6, 0x2}, {0x8, 0x7, 0x8, 0x5}, 0x6, 0x6e6bc0, 0x3, 0x0, 0x1, 0x2}, {{@in=@multicast1, 0x4d4}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3504, 0x0, 0x1, 0x0, 0x1c, 0xd2, 0xfffffffffffffffb}}, 0xe8) 07:03:11 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x2a, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) [ 570.226380][T26001] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 570.291068][T26001] FAT-fs (loop1): Filesystem has been set read-only 07:03:11 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) 07:03:11 executing program 3: 07:03:11 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x60, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:12 executing program 0: openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x10000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') sendfile(r0, r0, 0x0, 0x3) 07:03:12 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x2a, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) 07:03:12 executing program 4: 07:03:12 executing program 3: 07:03:12 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x66, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:12 executing program 4: 07:03:12 executing program 3: 07:03:12 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {}, 0x10001}, 0xe) 07:03:12 executing program 4: 07:03:12 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x2a, 0x8080fffffffe) getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 07:03:12 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000000)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) exit(0x0) sendfile(r0, r0, 0x0, 0x3) 07:03:12 executing program 3: 07:03:12 executing program 4: 07:03:12 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x6c, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:12 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000080), &(0x7f0000000100)=0x6) r1 = socket(0x8, 0x3, 0x3) connect$x25(r1, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x98) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000480)={0x18d0ca8f094b32c0, 0x2, 0x0, 0x1}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x5, 0x30, 0x2576, 0x2}, &(0x7f0000000140)=0x18) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r3}, &(0x7f00000001c0)=0x8) sendmsg$key(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x2, 0xd, 0x671, 0x2, 0x2, 0x0, 0x70bd2d, 0x25dfdbfd}, 0x10}}, 0x4000) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x4040, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r4, 0x40086408, &(0x7f0000000400)={0x7, 0x4}) io_setup(0xe0, &(0x7f0000000200)=0x0) io_pgetevents(r5, 0xffffffffffffffb3, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000300), &(0x7f0000000380)={&(0x7f0000000340)={0x7}, 0x8}) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x80000000, 0x0, 0xfffffffffffffffe}, 0xfffe}, 0xe) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) 07:03:12 executing program 4: 07:03:12 executing program 3: 07:03:12 executing program 4: 07:03:12 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x2a, 0x8080fffffffe) getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 07:03:12 executing program 3: 07:03:12 executing program 4: 07:03:12 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x9, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {}, 0x10001}, 0xe) fsetxattr$security_selinux(r0, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:lost_found_t:s0\x00', 0x22, 0x2) 07:03:13 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='n\x91t/\x03\x02.\xbf(V\xfc\xe87\xef\x01\x00\x00\x00\x05\x00\x00\x00fs2\xb5L2q\xa3a\x9d\x00\x155z\xd3\x0e<\x80.\r0\xed\x90#g\xa89\x84\\\x8b\x03p\x1c\xf8\xb7\x05\x00\x00\x00\x00\x00\x00d\x00\x00\x00\xe7\x12\xa4G\xd4\xef\xf4\x1a\xec+_\t\xe0\xfay\xdbZG\x9fW,\xf0e\xbe\xa6\xfebS\xbb\xb8\x8bXqd\xcc\x81\xa8\xf3t\x88T\xd4\x9aC\xe0\x8b^\xdf\xe3\x99-\x92\xb6\xe9\fq\x10\x04\xcc\xa1\xc1\x98\xa2!M\xcc\x1f\x8b\x94*\x06\x13\x90\xa0\t\xc1W\x1b\xb5\n\xf7\by\xd5\xa1b\xeb\xfe\xcf\x98\xb2\x87\x8f\x91\x96') ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000000)) r1 = getpgrp(0x0) sched_setparam(r1, &(0x7f00000002c0)=0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000040)={0x1, 0x2, {0x0, 0x1, 0x8, 0x3, 0x7}}) syz_genetlink_get_family_id$fou(&(0x7f0000000280)='fou\x00') exit(0x80) read(r0, &(0x7f00000000c0)=""/204, 0xcc) sendfile(r0, r0, 0x0, 0x3) 07:03:13 executing program 3: 07:03:13 executing program 4: 07:03:13 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x72, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:13 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000080)=0x4, 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, {}, 0x10001}, 0xe) 07:03:13 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x2a, 0x8080fffffffe) getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 07:03:13 executing program 3: 07:03:13 executing program 4: 07:03:13 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x8000, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000080)={0x57, 0xd1eb, 0x7, {0x3, 0x9}, {0x1, 0x8}, @const={0x3, {0x3, 0x1, 0x4, 0x6}}}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0xfffffffffffffffc, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f00000000c0)={'lapb0\x00', 0x9}) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, {}, 0x10001}, 0xe) 07:03:13 executing program 4: [ 572.280376][T26095] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 572.307386][T26095] FAT-fs (loop1): Filesystem has been set read-only 07:03:13 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x2a, 0x8080fffffffe) r2 = getpid() sched_setattr(r2, 0x0, 0x0) 07:03:13 executing program 3: 07:03:14 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x3fffc, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040), 0x4) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='\x81\xf9\xffj0\x1cGA\x029\xa0\b4\f.\x0fV\xc1\x83o\x1e\xcfr\x00v%\xc7\xa8\xc9\x7f\xb9\x1c\xf4\x03]wX\x15C\x01_\xc4.\xb4u\xc9\xe5o\x8bm\xd3\xbdj\xdb\xa4\x12\xf8\xb8\xd3\xbd=\x85\x94D\xd9\x8dZx}J\xc7\x18\xean\xff\x1d\xafl\xa3<\xc5l`\xdcX\x0f$\x0e2+\xac\x1c\xc7]\x13e\x03F\x9da') exit(0x100) sendfile(r1, r1, 0x0, 0x3) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000180)=0x10) syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x1, 0x2) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000080)) 07:03:14 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x78, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:14 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = mq_open(&(0x7f0000000000)='-$\x00', 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000040)) 07:03:14 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x2, 0x20200) write$P9_RREMOVE(r1, &(0x7f0000000240)={0x7, 0x7b, 0x1}, 0x7) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {}, 0x10001}, 0xe) accept(r0, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000000)=0x80) getsockopt$inet6_buf(r2, 0x29, 0x0, &(0x7f0000000100)=""/154, &(0x7f00000001c0)=0x9a) 07:03:14 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x7, &(0x7f00000001c0), 0x0) 07:03:14 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x2a, 0x8080fffffffe) sched_setattr(0x0, 0x0, 0x0) 07:03:14 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) connect$inet(r0, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000004f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 07:03:14 executing program 3: r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00\x00\x00\x00\xff\xff\xff\xff\x00', 0x20, 0x1, 0x9c0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0xb, 0x0, 0x0, 'bridge0\x00', 'vlan0\x00', 'sit0\x00', 'teql0\x00', @empty, [], @link_local, [], 0x8b8, 0x8b8, 0x930, [@among={'among\x00', 0x820, {{0x414, 0xc}}}]}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "a600a9e85725d89818472e65aba21d9bbc1b20e8331c6fd24a5aceaeefe102e42a013ac2c00eeb782c34eab997013e0506220c21a44cc58ff5bc83d5e4066c77"}}}}]}, {0x0, '\x00', 0x1, 0xffffffdffffffffc}]}, 0xa38) 07:03:14 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {}, 0x10001}, 0xe) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x10201, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000080)={@initdev, @broadcast}, &(0x7f00000000c0)=0xc) 07:03:14 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x2a, 0x8080fffffffe) sched_setattr(0x0, 0x0, 0x0) [ 573.290686][T26127] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 573.316642][T26127] FAT-fs (loop1): Filesystem has been set read-only 07:03:14 executing program 3: mkdir(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) name_to_handle_at(r0, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000040)={0xc, 0x0, "7556c5b9"}, 0x0, 0x400) 07:03:14 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x800, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)=0xdd63) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000005, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, {}, 0x10001}, 0xe) 07:03:15 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') exit(0x0) sendfile(r0, r0, 0x0, 0x3) getdents64(r0, &(0x7f0000000000)=""/12, 0xc) 07:03:15 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x7e, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:15 executing program 4: socketpair$unix(0x1, 0x400000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) name_to_handle_at(r1, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000040)={0xc, 0x0, "7556c5b9"}, 0x0, 0x400) 07:03:15 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {}, 0x10001, 0xffffffffffffffff}, 0xe) socket$inet(0x2, 0x80006, 0x3f) 07:03:15 executing program 3: pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0x80008) 07:03:15 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x2a, 0x8080fffffffe) sched_setattr(0x0, 0x0, 0x0) 07:03:15 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) [ 574.164186][T26165] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) 07:03:15 executing program 4: creat(&(0x7f0000000580)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='fuse\x00', 0x0, 0x0) 07:03:15 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0xffffffffffffffff, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {}, 0x10001}, 0xe) 07:03:15 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) [ 574.220642][T26165] FAT-fs (loop1): Filesystem has been set read-only 07:03:15 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x84, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:15 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) [ 574.576811][T26200] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 574.585347][T26200] FAT-fs (loop1): Filesystem has been set read-only 07:03:16 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000200)={0x20002, 0x0, [0x450b, 0x100000000, 0x3, 0x1, 0x433, 0x7, 0x3, 0x3]}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x8, "ec9559e1c8815c0f"}, &(0x7f0000000280)=0x2c) exit(0x0) sendfile(r1, r1, 0x0, 0x3) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f00000000c0)={{0x3000, 0x1000, 0x10, 0x9, 0x7, 0x5, 0x3, 0x5, 0x9f, 0xee7, 0x8000, 0x100000001}, {0x10000, 0x1, 0x9, 0x1, 0x81, 0x1, 0x4, 0x3, 0x2, 0x9, 0x193f, 0x100}, {0x2000, 0x1002, 0xe, 0x0, 0x8, 0x6, 0xc7, 0x7f7fdc0a, 0x4, 0x1, 0x156f638b, 0x80000000}, {0x1, 0x5000, 0x1f, 0x3, 0x9, 0x6, 0x8, 0xcf5e, 0xff, 0x0, 0xfffffffffffffff7, 0x9}, {0x1, 0x10000, 0x1a, 0x4, 0x100000000, 0x3496, 0x80000001, 0x5, 0x80, 0xffffffffffff1349, 0x3, 0x1}, {0x100000, 0x5004, 0x0, 0x7f, 0x0, 0x8001, 0xa5c, 0x3, 0xb02c, 0x7f, 0x80000001, 0x6}, {0x3000, 0x5004, 0xf, 0x8001, 0x0, 0x43, 0x1, 0x81, 0x10000, 0x100000001, 0x40, 0x8}, {0x10000, 0x102000, 0x0, 0x1, 0x100000001, 0x0, 0x8184, 0x3f, 0x7, 0x7ff, 0x1d0, 0x1}, {0x10f000, 0x2002}, {0x1000, 0x5000}, 0x0, 0x0, 0x100000, 0x4000, 0x7, 0x900, 0x1001, [0x7fff, 0x7, 0x9, 0x1]}) 07:03:16 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000000)=0x3, 0x4) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {}, 0x10001}, 0xe) 07:03:16 executing program 4: creat(&(0x7f0000000580)='./file0\x00', 0x0) 07:03:16 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) write$cgroup_pid(r0, &(0x7f0000000080), 0xfffffe38) 07:03:16 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x8a, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:16 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, {0x8, 0x0, 0x4, 0x2, 0x0, 0x1}, 0x10001, 0x1}, 0xe) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x0, 0x2, 0x9, 0x3d4d6e62, 0x100000000}) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x6, 0x44443) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'bcsf0\x00', @local}) 07:03:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000680)) r1 = creat(&(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) dup2(r0, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x294) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000140)={0x77359400}, 0x10) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)="2265162d6c36d2d553b535288f726cee2343cd3da80438bbe33926e61647fc7fcab63c030ef325ad0f899dcc3d1baefa9b3b5a978b1e8319bcc3c41f139590cb2be0b46092dbd2174e400b05", 0x4c}], 0x1, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, 0x0) 07:03:16 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:16 executing program 2: r0 = getpgrp(0xffffffffffffffff) r1 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x6, 0x40800) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x9, 0x8, 0x7f, 0x0, 0x6b65, 0x8000, 0x82cffe65e161ec62, 0x4, 0x3, 0x6, 0xffff, 0x8, 0x7f, 0x74, 0x8, 0x3ff, 0x10001, 0x4, 0x0, 0x0, 0x100, 0x8cf, 0x5, 0xdf, 0x100, 0x9aa5, 0xfffffffffffffffe, 0x6, 0x125, 0x4, 0x4, 0x7, 0x8, 0x1ff, 0x2, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x10000, 0x7e9, 0x7, 0x0, 0x20, 0x0, 0x25b}, r0, 0xf, r1, 0x3) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, {}, 0x10001}, 0xe) 07:03:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x600, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:16 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) [ 575.549702][T26241] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 575.581601][T26241] FAT-fs (loop1): Filesystem has been set read-only 07:03:17 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') exit(0x0) recvfrom$unix(r0, &(0x7f00000000c0)=""/136, 0x88, 0x10000, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x3) 07:03:17 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x0, 0x4, 0xfffffffffffffffe}, 0x10001, 0x5}, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xffff, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x4000, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) 07:03:17 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000680)) r1 = creat(&(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) dup2(r0, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x294) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000140)={0x77359400}, 0x10) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)="2265162d6c36d2d553b535288f726cee2343cd3da80438bbe33926e61647fc7fcab63c030ef325ad0f899dcc3d1baefa9b3b5a978b1e8319bcc3c41f139590cb2be0b46092dbd2174e400b05", 0x4c}], 0x1, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, 0x0) 07:03:17 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xc00, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:17 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x4, 0x4) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {}, 0x10001}, 0xe) 07:03:17 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000680)) r1 = creat(&(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) dup2(r0, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x294) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000140)={0x77359400}, 0x10) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)="2265162d6c36d2d553b535288f726cee2343cd3da80438bbe33926e61647fc7fcab63c030ef325ad0f899dcc3d1baefa9b3b5a978b1e8319bcc3c41f139590cb2be0b46092dbd2174e400b05", 0x4c}], 0x1, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, 0x0) 07:03:17 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000080)={0x7fff, {0x15, 0x1, 0x200, 0x9, 0x7ff, 0x9}}) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {}, 0x10001}, 0xe) [ 576.308153][T26269] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) 07:03:17 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) [ 576.357563][T26269] FAT-fs (loop1): Filesystem has been set read-only 07:03:17 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xf00, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:17 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, {}, 0x10001, 0xfffffffffffffffe}, 0xe) [ 576.619009][T26297] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 576.667801][T26297] FAT-fs (loop1): Filesystem has been set read-only 07:03:18 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000040)) exit(0x0) sendfile(r0, r0, 0x0, 0x3) 07:03:18 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:18 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x10000, 0x200) getpeername$netlink(r1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {}, 0x10001}, 0xe) 07:03:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000680)) r1 = creat(&(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) dup2(r0, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x294) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000140)={0x77359400}, 0x10) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)="2265162d6c36d2d553b535288f726cee2343cd3da80438bbe33926e61647fc7fcab63c030ef325ad0f899dcc3d1baefa9b3b5a978b1e8319bcc3c41f139590cb2be0b46092dbd2174e400b05", 0x4c}], 0x1, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, 0x0) 07:03:18 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x1200, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000680)) r1 = creat(&(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) dup2(r0, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x294) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000140)={0x77359400}, 0x10) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)="2265162d6c36d2d553b535288f726cee2343cd3da80438bbe33926e61647fc7fcab63c030ef325ad0f899dcc3d1baefa9b3b5a978b1e8319bcc3c41f139590cb2be0b46092dbd2174e400b05", 0x4c}], 0x1, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, 0x0) 07:03:18 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:18 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x0, 0x8000}, 0x10001}, 0xe) 07:03:18 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x4201, 0x0) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x20, &(0x7f0000000140)={@rand_addr, @empty, 0x0}, &(0x7f0000000180)=0xc) connect$can_bcm(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000080)={'HL\x00'}, &(0x7f00000000c0)=0x1e) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, 0x10001, 0x3}, 0xe) [ 577.184439][T26315] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) 07:03:18 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) [ 577.234980][T26315] FAT-fs (loop1): Filesystem has been set read-only 07:03:18 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8400) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000140)={0x5, 0xfe1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000080)={0x6, 0x3, 'client1\x00', 0x3, "0afc670fccfb68bd", "851ddded0ca105accbd6332987ad55057ef031af274b529210d28722734f2f6a", 0x1, 0x9}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1000000000005, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x8000000000}, 0x10001}, 0xe) 07:03:18 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x1800, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:18 executing program 0: openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') exit(0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x80080, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000100)={0x6, 0x0, {0x0, 0x3, 0x81, 0x2, 0x8}}) rt_sigaction(0x19, &(0x7f00000002c0)={&(0x7f0000000200)="c44225928cb42d0000008336d8c4827d58454a400facb8aaf30000002ef243a5c4431148498727672ed3582cc4a3796125000000008ef340e1fb8f2858cd4ffe00", {0x7}, 0x1, &(0x7f0000000280)="460f1a94f200000080400f38f07d0047ad3642f7039ae60000ddb6030000000f5d2fc48279786b0c418ea0a000000065f2470f1b4e31c4c17b1118"}, 0x0, 0x8, &(0x7f0000000300)) sendfile(r0, r0, 0x0, 0x180000000) getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) connect$rxrpc(r1, &(0x7f0000000180)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e20, @multicast2}}, 0x7) 07:03:18 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x0, 0xd1, 0x0, 0x0, 0x2}, 0x10001}, 0xe) 07:03:18 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000680)) r1 = creat(&(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) dup2(r0, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x294) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000140)={0x77359400}, 0x10) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)="2265162d6c36d2d553b535288f726cee2343cd3da80438bbe33926e61647fc7fcab63c030ef325ad0f899dcc3d1baefa9b3b5a978b1e8319bcc3c41f139590cb2be0b46092dbd2174e400b05", 0x4c}], 0x1, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, 0x0) 07:03:18 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x1e00, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:18 executing program 4: syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60b4090000303aff02024300600000000000ffff55e7a1e0000002ff020000000000000000000000000001870090780007040060b680fa0000001000000000080000000004ffffffffffff00000000000000000000ffffac"], 0x0) 07:03:19 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x40000007, 0xcf) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000380), 0x113, 0x7}}, 0x20) r1 = syz_open_dev$dri(&(0x7f0000001080)='/dev/dri/card#\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r4 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000002c0)='X', 0x1, 0xfffffffffffffffe) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x10000, 0x0) accept4$rose(r5, &(0x7f0000000480)=@full={0xb, @remote, @bcast, 0x0, [@remote, @bcast, @remote, @remote, @bcast, @rose]}, &(0x7f00000004c0)=0x40, 0x800) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) r7 = add_key$user(&(0x7f0000000640)='user\x00', &(0x7f0000000540)={'syz'}, &(0x7f00000000c0), 0xc6, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000300)={r4, r7, r7}, &(0x7f0000000080)=""/107, 0x6b, 0x0) fcntl$getflags(r2, 0x401) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f0000000440)={0x10000, 0x0, 0x1, 0x2, 0x1}, 0xc) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x11b400, 0x0) ioctl$sock_x25_SIOCDELRT(r5, 0x890c, &(0x7f0000000700)={@remote={[], 0x2}, 0xd, 'nr0\x00'}) ioctl$BLKPG(r3, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000500)={0x0, 0x80000, r5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000580)={r9, 0x80000, r1}) connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs={0x1}, 0x6e) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) ioctl$TCSBRK(r8, 0x5409, 0x1f) r10 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000600)=0x378) ioctl$IOC_PR_PREEMPT(r8, 0x401870cb, &(0x7f0000000040)={0x18b5, 0xcd, 0x5, 0x42fc}) getsockopt$IP6T_SO_GET_ENTRIES(r10, 0x29, 0x41, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f00000001c0)={0xffffffffffffffff, r6}) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r11, &(0x7f0000000040)={0x1f, 0x0, {}, 0x10001}, 0xe) 07:03:19 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x84000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r2 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x3, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) 07:03:19 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:19 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x2400, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:19 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002240)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000040)='./file1\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x4bff) pwrite64(r2, &(0x7f0000001200)="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", 0xe00, 0x0) fadvise64(r2, 0x0, 0x0, 0x3) 07:03:19 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {}, 0x10001}, 0xe) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x10f200, 0x0) write$P9_RSTAT(r1, &(0x7f0000000080)={0x53, 0x7d, 0x1, {0x0, 0x4c, 0x7, 0x10000, {0x1, 0x4, 0x1}, 0x8300000, 0x10001, 0x3, 0xffffffff, 0xe, 'mime_type\x8ebdev', 0x0, '', 0x8, 'em1wlan0', 0x3, 'em1'}}, 0x53) 07:03:20 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4000, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040)=0xfffffffffffffffc, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') exit(0x0) sendfile(r1, r1, 0x0, 0x3) 07:03:20 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f00000000c0)={{0x11, @dev, 0x0, 0x0, 'lblcr\x00'}}, 0x44) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002e4000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) name_to_handle_at(r1, &(0x7f00002e4000)='./file\xff\xff', &(0x7f00000000c0)=ANY=[], &(0x7f0000001ffc), 0x1000) 07:03:20 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x100000890f, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x100000001}) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000000)={0x0, 0x8000000000, 0x0, 0x0, 0x87}) 07:03:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x2a00, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000680)) r1 = creat(&(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) dup2(r0, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x294) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000140)={0x77359400}, 0x10) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)="2265162d6c36d2d553b535288f726cee2343cd3da80438bbe33926e61647fc7fcab63c030ef325ad0f899dcc3d1baefa9b3b5a978b1e8319bcc3c41f139590cb2be0b46092dbd2174e400b05", 0x4c}], 0x1, 0x0) 07:03:20 executing program 2: 07:03:20 executing program 4: 07:03:20 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x3000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:20 executing program 4: 07:03:20 executing program 2: 07:03:21 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') exit(0x7f) sendfile(r0, r0, 0x0, 0x3) 07:03:21 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:21 executing program 4: 07:03:21 executing program 2: 07:03:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x3600, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000680)) r1 = creat(&(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) dup2(r0, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x294) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000140)={0x77359400}, 0x10) 07:03:21 executing program 4: 07:03:21 executing program 2: 07:03:21 executing program 4: 07:03:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x3c00, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:21 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:21 executing program 2: [ 580.413268][T26458] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 580.439531][T26458] FAT-fs (loop1): Filesystem has been set read-only 07:03:21 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') exit(0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x12000100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x400, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004810) sendfile(r0, r0, 0x0, 0x3) sendto$isdn(r0, &(0x7f0000000180)={0x5, 0xc86, "65597c6af0505d0aa3a1d311ee0ca772c6dbf6e5"}, 0x1c, 0x0, &(0x7f00000001c0)={0x22, 0xdbb8, 0x5, 0x4, 0x2}, 0x6) 07:03:21 executing program 4: 07:03:21 executing program 2: 07:03:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x3f00, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:21 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000680)) r1 = creat(&(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) dup2(r0, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x294) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") 07:03:22 executing program 2: 07:03:22 executing program 4: 07:03:22 executing program 5: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:22 executing program 4: 07:03:22 executing program 2: [ 581.045644][T26470] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 581.073542][T26470] FAT-fs (loop1): Filesystem has been set read-only 07:03:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x4000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:22 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') accept4$llc(r0, 0x0, &(0x7f0000000200), 0x800) exit(0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x3ffd, 0x108) sendfile(r0, r0, 0x0, 0x3) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x400, 0x8, 0xd1e6, 0x1, 0x0}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e23, 0x6, @remote, 0x1}}, 0x8, 0xfffffffffffffffd}, 0x90) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x101, 0x100000001}) 07:03:22 executing program 4: 07:03:22 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x3c00, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:22 executing program 5: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x4200, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000680)) r1 = creat(&(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) dup2(r0, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x294) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) 07:03:23 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x40000007, 0xcf) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000380), 0x113, 0x7}}, 0x20) r1 = syz_open_dev$dri(&(0x7f0000001080)='/dev/dri/card#\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r4 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000002c0)='X', 0x1, 0xfffffffffffffffe) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x10000, 0x0) accept4$rose(r5, &(0x7f0000000480)=@full={0xb, @remote, @bcast, 0x0, [@remote, @bcast, @remote, @remote, @bcast, @rose]}, &(0x7f00000004c0)=0x40, 0x800) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) r7 = add_key$user(&(0x7f0000000640)='user\x00', &(0x7f0000000540)={'syz'}, &(0x7f00000000c0), 0xc6, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000300)={r4, r7, r7}, &(0x7f0000000080)=""/107, 0x6b, 0x0) fcntl$getflags(r2, 0x401) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f0000000440)={0x10000, 0x0, 0x1, 0x2, 0x1}, 0xc) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x11b400, 0x0) ioctl$sock_x25_SIOCDELRT(r5, 0x890c, &(0x7f0000000700)={@remote={[], 0x2}, 0xd, 'nr0\x00'}) ioctl$BLKPG(r3, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000500)={0x0, 0x80000, r5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000580)={r9, 0x80000, r1}) connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs={0x1}, 0x6e) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) ioctl$TCSBRK(r8, 0x5409, 0x1f) r10 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000600)=0x378) ioctl$IOC_PR_PREEMPT(r8, 0x401870cb, &(0x7f0000000040)={0x18b5, 0xcd, 0x5, 0x42fc}) getsockopt$IP6T_SO_GET_ENTRIES(r10, 0x29, 0x41, &(0x7f0000000880)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000009f00000018029ea690858bfb92c4925e59511d2128a26cae33f48d67b991621df681c0e5e56f5704d56fb1cf1f353403e8df243529848fc1c7e807f2889a8aeda146e9c9a8ce6ad1a0a4b9de624c47f7837459c49f9f888d2705c886dc49d79c50731b87fb47babed83fbad8ac5119c18f5909e69eeb39a623e4b9c7e95df08502364c64f024ad67e0fd9d1ecdc1eaa681ef0ce5bf93a03c5f9cc2d545da96849f1caa56535b03d5eaac5be99d0cf878a2f27b2ca0f3fd4ff125ccb108cc3516f825a40f69e4c4d63a140f98c3b7faa00cbb7612a1a84154c57eb607e6c873d8637ba62f81248a1602161c4b1069dcfec27ec68a71af3b193c0936938c22d2222edc2d9e83fb51b3db917c08f3d5fa87aca5f7a2ea9b3ccf9dccf6326b5a0854bc6ed6c443592e5bd71fbd43f37e198410039efc69839720434be3024b0f57294312fb894fafc019e9b60780bcdcf131d3ca610605b68697be44fe06cdb435daf6bc49daa64322da87fb3e64033b89757bc95cfbb235148a3b4934f299cda559cc2fe1e5835b8eca4b3b0bdb22e1f53caf14478f9c0975788d0bd36073e9ffbe0bb91d6ce157e12b2d28da03098cbea7aebdce6457375a3951b423c7e302a93c4dd1e8e8c4b0c285966437dbae04fae21e2d0e651b888993fc1a033d5648ae24d9fecab992b0a66b7610b66cbdbfdc5e2ae38939a949f675e616588fb204718c4f5cbc002cb5511fec1ceb260d904fe1dee00d6dc704591dc344a19b49f4d77052b718b9056747a909862f"], 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f00000001c0)={0xffffffffffffffff, r6}) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r11, &(0x7f0000000040)={0x1f, 0x0, {}, 0x10001}, 0xe) 07:03:23 executing program 5: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:23 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x40000007, 0xcf) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000380), 0x113, 0x7}}, 0x20) r1 = syz_open_dev$dri(&(0x7f0000001080)='/dev/dri/card#\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r4 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000002c0)='X', 0x1, 0xfffffffffffffffe) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x10000, 0x0) accept4$rose(r5, &(0x7f0000000480)=@full={0xb, @remote, @bcast, 0x0, [@remote, @bcast, @remote, @remote, @bcast, @rose]}, &(0x7f00000004c0)=0x40, 0x800) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) r7 = add_key$user(&(0x7f0000000640)='user\x00', &(0x7f0000000540)={'syz'}, &(0x7f00000000c0), 0xc6, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000300)={r4, r7, r7}, &(0x7f0000000080)=""/107, 0x6b, 0x0) fcntl$getflags(r2, 0x401) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f0000000440)={0x10000, 0x0, 0x1, 0x2, 0x1}, 0xc) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x11b400, 0x0) ioctl$sock_x25_SIOCDELRT(r5, 0x890c, &(0x7f0000000700)={@remote={[], 0x2}, 0xd, 'nr0\x00'}) ioctl$BLKPG(r3, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000500)={0x0, 0x80000, r5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000580)={r9, 0x80000, r1}) connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs={0x1}, 0x6e) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) ioctl$TCSBRK(r8, 0x5409, 0x1f) r10 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000600)=0x378) ioctl$IOC_PR_PREEMPT(r8, 0x401870cb, &(0x7f0000000040)={0x18b5, 0xcd, 0x5, 0x42fc}) getsockopt$IP6T_SO_GET_ENTRIES(r10, 0x29, 0x41, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f00000001c0)={0xffffffffffffffff, r6}) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r11, &(0x7f0000000040)={0x1f, 0x0, {}, 0x10001}, 0xe) 07:03:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x4800, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:23 executing program 5: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:23 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) [ 582.375798][T26531] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 582.408304][T26531] FAT-fs (loop1): Filesystem has been set read-only 07:03:23 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') exit(0x0) sendfile(r0, r0, 0x0, 0x3) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x77359400}, 0x10) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x1, [0x8]}, 0x6) 07:03:23 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xf00, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:23 executing program 5: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:23 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x4e00, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000680)) r1 = creat(&(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) dup2(r0, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x294) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 07:03:24 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x5400, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:24 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:24 executing program 5: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:24 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x4800, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:24 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:24 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 07:03:24 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4a4100, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000200)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000280)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0xffffffffffffffff, r0, 0x0, 0x9, &(0x7f00000002c0)='&*^wlan0\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000340)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000380)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000240)='cgroup\x00') exit(0xffd) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x7ff}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000140)={r3, 0x12f9, 0x30, 0x2, 0x81}, &(0x7f0000000180)=0x18) syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x3af, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000080)={0x800100b, 0x4, 0x1}) sendfile(r2, r2, 0x0, 0x3) 07:03:24 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x5a00, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:24 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xc00, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:24 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:24 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 07:03:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000680)) r1 = creat(&(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) dup2(r0, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x294) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) 07:03:25 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) [ 583.985667][T26597] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 584.018426][T26597] FAT-fs (loop1): Filesystem has been set read-only 07:03:25 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 07:03:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x6000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:25 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x5a00, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:25 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:25 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) [ 584.338613][T26631] FAT-fs (loop5): bogus number of reserved sectors [ 584.353602][T26631] FAT-fs (loop5): Can't find a valid FAT filesystem [ 584.468078][T26629] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 584.513210][T26629] FAT-fs (loop1): Filesystem has been set read-only 07:03:25 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') exit(0x3) sendfile(r0, r0, 0x0, 0x3) 07:03:25 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:25 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x600, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x6600, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:25 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000680)) r1 = creat(&(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) dup2(r0, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x294) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) dup2(r2, r2) [ 584.835920][T26656] FAT-fs (loop5): bogus number of reserved sectors 07:03:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) [ 584.886124][T26656] FAT-fs (loop5): Can't find a valid FAT filesystem 07:03:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000680)) r1 = creat(&(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) dup2(r0, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x294) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) dup2(r2, r2) 07:03:26 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x6c00, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) [ 584.947962][T26649] FAT-fs (loop2): error, invalid access to FAT (entry 0x00006500) [ 584.977478][T26649] FAT-fs (loop2): Filesystem has been set read-only 07:03:26 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4a4100, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000200)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000280)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0xffffffffffffffff, r0, 0x0, 0x9, &(0x7f00000002c0)='&*^wlan0\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000340)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000380)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000240)='cgroup\x00') exit(0xffd) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x7ff}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000140)={r3, 0x12f9, 0x30, 0x2, 0x81}, &(0x7f0000000180)=0x18) syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x3af, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000080)={0x800100b, 0x4, 0x1}) sendfile(r2, r2, 0x0, 0x3) 07:03:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000680)) r1 = creat(&(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) dup2(r0, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x294) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 07:03:26 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) [ 585.257431][T26685] FAT-fs (loop5): bogus number of reserved sectors [ 585.290736][T26685] FAT-fs (loop5): Can't find a valid FAT filesystem [ 585.313884][T26678] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 585.337036][T26678] FAT-fs (loop1): Filesystem has been set read-only 07:03:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000000c0)=[0x9c8d, 0x1]) r1 = accept4(r0, &(0x7f0000000100)=@in={0x2, 0x0, @dev}, &(0x7f0000000180)=0x80, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000001c0), &(0x7f0000000200)=0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0x2f, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') exit(0x0) sendfile(r2, r2, 0x0, 0x3) 07:03:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000680)) r1 = creat(&(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) dup2(r0, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x294) 07:03:26 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x7200, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:26 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) [ 585.707102][T26704] FAT-fs (loop5): bogus number of reserved sectors 07:03:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000680)) r1 = creat(&(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) dup2(r0, r1) socket$inet6_tcp(0xa, 0x1, 0x0) [ 585.749452][T26704] FAT-fs (loop5): Can't find a valid FAT filesystem [ 585.842147][T26699] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 585.850407][T26699] FAT-fs (loop1): Filesystem has been set read-only 07:03:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x7800, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:27 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:27 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4a4100, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000200)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000280)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0xffffffffffffffff, r0, 0x0, 0x9, &(0x7f00000002c0)='&*^wlan0\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000340)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000380)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000240)='cgroup\x00') exit(0xffd) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x7ff}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000140)={r3, 0x12f9, 0x30, 0x2, 0x81}, &(0x7f0000000180)=0x18) syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x3af, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000080)={0x800100b, 0x4, 0x1}) sendfile(r2, r2, 0x0, 0x3) 07:03:27 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) [ 586.005332][T26723] FAT-fs (loop5): bogus number of reserved sectors 07:03:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000680)) r1 = creat(&(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) dup2(r0, r1) [ 586.058806][T26723] FAT-fs (loop5): Can't find a valid FAT filesystem [ 586.129863][T26726] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 586.161299][T26726] FAT-fs (loop1): Filesystem has been set read-only 07:03:27 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x20000, 0x0) accept4$nfc_llcp(r0, 0x0, &(0x7f0000000040), 0x80000) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') exit(0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x10000}) sendfile(r1, r1, 0x0, 0x3) 07:03:27 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x7e00, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000680)) creat(&(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) 07:03:27 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) [ 586.656423][T26749] FAT-fs (loop5): bogus number of reserved sectors [ 586.683352][T26749] FAT-fs (loop5): Can't find a valid FAT filesystem 07:03:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000680)) 07:03:27 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) [ 586.761729][T26751] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) 07:03:27 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) [ 586.802235][T26751] FAT-fs (loop1): Filesystem has been set read-only 07:03:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x8400, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:28 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4a4100, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000200)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000280)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0xffffffffffffffff, r0, 0x0, 0x9, &(0x7f00000002c0)='&*^wlan0\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000340)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000380)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000240)='cgroup\x00') exit(0xffd) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x7ff}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000140)={r3, 0x12f9, 0x30, 0x2, 0x81}, &(0x7f0000000180)=0x18) syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x3af, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000080)={0x800100b, 0x4, 0x1}) sendfile(r2, r2, 0x0, 0x3) 07:03:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/11, 0xb) [ 586.868722][T26771] FAT-fs (loop5): bogus number of reserved sectors [ 586.897669][T26771] FAT-fs (loop5): Can't find a valid FAT filesystem 07:03:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:28 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:28 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000000)) getpeername$unix(r0, &(0x7f00000000c0), &(0x7f0000000040)=0x6e) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') exit(0x20) sendfile(r1, r1, 0x0, 0x0) 07:03:28 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x8a00, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) [ 587.577567][T26793] FAT-fs (loop5): bogus number of reserved sectors [ 587.590943][T26793] FAT-fs (loop5): Can't find a valid FAT filesystem 07:03:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:28 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:28 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xff0f, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/11, 0xb) 07:03:28 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4a4100, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000200)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000280)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0xffffffffffffffff, r0, 0x0, 0x9, &(0x7f00000002c0)='&*^wlan0\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000340)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000380)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000240)='cgroup\x00') exit(0xffd) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x7ff}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000140)={r3, 0x12f9, 0x30, 0x2, 0x81}, &(0x7f0000000180)=0x18) syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x3af, 0x0) sendfile(r2, r2, 0x0, 0x3) [ 587.813978][T26807] FAT-fs (loop5): bogus number of reserved sectors [ 587.874210][T26807] FAT-fs (loop5): Can't find a valid FAT filesystem 07:03:29 executing program 4: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:29 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) [ 588.019614][T26816] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 588.039691][T26816] FAT-fs (loop1): Filesystem has been set read-only [ 588.040579][T26826] FAT-fs (loop5): bogus number of reserved sectors 07:03:29 executing program 4: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x1517f, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) [ 588.080214][T26826] FAT-fs (loop5): Can't find a valid FAT filesystem 07:03:29 executing program 4: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:29 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') exit(0x0) sendfile(r0, r0, 0x0, 0x3) sendto$packet(r0, &(0x7f0000000000)="0d82c4714b62532c84ffe634bbafd834de94ff2f64936a495e74c5e1396d1a5ba5722b91f6366c758f2e117fab41fe4cdc85b7b8ba1bc9563c83ca25322e22addc91ebb8b1511e609bad503ca29f2eb442dd3aebda3c0d2d7cd921aa8de6fd81e5ef845c84855bba8c1579c7f4dccd2f1a7359690fa94834", 0x78, 0x84, 0x0, 0x0) 07:03:29 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:29 executing program 4: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x1000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) [ 588.560725][T26845] FAT-fs (loop5): bogus number of reserved sectors [ 588.597857][T26845] FAT-fs (loop5): Can't find a valid FAT filesystem 07:03:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/11, 0xb) 07:03:29 executing program 4: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:29 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4a4100, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000200)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000280)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0xffffffffffffffff, r0, 0x0, 0x9, &(0x7f00000002c0)='&*^wlan0\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000340)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000380)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000240)='cgroup\x00') exit(0xffd) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x7ff}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000140)={r3, 0x12f9, 0x30, 0x2, 0x81}, &(0x7f0000000180)=0x18) sendfile(r2, r2, 0x0, 0x3) 07:03:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x2000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:29 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:30 executing program 4: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) [ 588.887676][T26865] FAT-fs (loop5): bogus number of reserved sectors [ 588.911332][T26865] FAT-fs (loop5): Can't find a valid FAT filesystem 07:03:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x4000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:30 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) [ 589.161855][T26882] FAT-fs (loop5): bogus number of reserved sectors [ 589.194366][T26878] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 589.196681][T26882] FAT-fs (loop5): Can't find a valid FAT filesystem [ 589.208669][T26878] FAT-fs (loop1): Filesystem has been set read-only 07:03:30 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') exit(0x0) sendfile(r0, r0, 0x0, 0x3) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f00000000c0)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) 07:03:30 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x6000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:30 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:30 executing program 3: read(0xffffffffffffffff, &(0x7f0000000300)=""/11, 0xb) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000680)) [ 589.522995][T26890] FAT-fs (loop5): bogus number of reserved sectors [ 589.560973][T26890] FAT-fs (loop5): Can't find a valid FAT filesystem 07:03:30 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:30 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4a4100, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000200)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000280)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0xffffffffffffffff, r0, 0x0, 0x9, &(0x7f00000002c0)='&*^wlan0\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000340)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000380)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000240)='cgroup\x00') exit(0xffd) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x7ff}, &(0x7f0000000100)=0x8) sendfile(r2, r2, 0x0, 0x3) 07:03:30 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:30 executing program 3: read(0xffffffffffffffff, &(0x7f0000000300)=""/11, 0xb) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000680)) 07:03:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xc000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:30 executing program 3: read(0xffffffffffffffff, &(0x7f0000000300)=""/11, 0xb) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000680)) 07:03:30 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) [ 589.812838][T26916] FAT-fs (loop5): bogus number of reserved sectors [ 589.846861][T26916] FAT-fs (loop5): Can't find a valid FAT filesystem [ 589.944110][T26918] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 589.961205][T26918] FAT-fs (loop1): Filesystem has been set read-only 07:03:31 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') exit(0x0) sendfile(r0, r0, 0x0, 0x7) 07:03:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000300)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000680)) 07:03:31 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:31 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xf000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) [ 590.415919][T26941] FAT-fs (loop4): bogus number of reserved sectors [ 590.425360][T26936] FAT-fs (loop5): bogus number of reserved sectors [ 590.448210][T26936] FAT-fs (loop5): Can't find a valid FAT filesystem 07:03:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000300)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000680)) [ 590.460634][T26941] FAT-fs (loop4): Can't find a valid FAT filesystem 07:03:31 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4a4100, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000200)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000280)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0xffffffffffffffff, r0, 0x0, 0x9, &(0x7f00000002c0)='&*^wlan0\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000340)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000380)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000240)='cgroup\x00') exit(0xffd) sendfile(r2, r2, 0x0, 0x3) [ 590.499904][T26932] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 590.528184][T26932] FAT-fs (loop1): Filesystem has been set read-only 07:03:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x10000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:31 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:31 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000300)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000680)) 07:03:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/ptmx\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000300)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000680)) [ 590.736066][T26961] FAT-fs (loop5): bogus number of reserved sectors [ 590.743022][T26964] FAT-fs (loop4): bogus number of reserved sectors [ 590.761282][T26961] FAT-fs (loop5): Can't find a valid FAT filesystem [ 590.769933][T26964] FAT-fs (loop4): Can't find a valid FAT filesystem 07:03:32 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000240)="5af89f6b40a4410d257f97dd0cf09d488dba7d450f19b2025ec0a19146c3ce37894f0de9c9621907982fc707055e2a4dd75c2c9e6dd37d5e6b596008cc1944420cfa52bc7f07d12e4c00901de169ed293e1e5485869a5bcdbb3657a8db799dfa49ba09ea6f062c1685e6501179961289929d651620624bfc10716ebf2616b50dd206af5fc2487d1f8bcf4203a80e79841ef740eaddb1d1ddd3a84e081cf76ac7dc734169758e7a0426906badce3881d65fcf3ddd04b488e5742e0f5b08bd24a6409853134c7924") write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x117}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000200)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x3, {0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7}, r1}}, 0x38) exit(0x0) sendfile(r0, r0, 0x0, 0x3) read$alg(r0, &(0x7f00000000c0)=""/144, 0x90) pipe(&(0x7f0000000340)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x2000) 07:03:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/ptmx\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000300)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000680)) 07:03:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x12000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:32 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:32 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) [ 591.334940][T26982] FAT-fs (loop4): bogus number of reserved sectors [ 591.336531][T26980] FAT-fs (loop5): bogus number of reserved sectors [ 591.373248][T26982] FAT-fs (loop4): Can't find a valid FAT filesystem 07:03:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/ptmx\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000300)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000680)) [ 591.381046][T26980] FAT-fs (loop5): Can't find a valid FAT filesystem 07:03:32 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4a4100, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000200)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000280)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0xffffffffffffffff, r0, 0x0, 0x9, &(0x7f00000002c0)='&*^wlan0\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000340)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000380)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000240)='cgroup\x00') sendfile(r2, r2, 0x0, 0x3) 07:03:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000680)) 07:03:32 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) [ 591.520119][T26976] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) 07:03:32 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) [ 591.563049][T26976] FAT-fs (loop1): Filesystem has been set read-only [ 591.575586][T26998] FAT-fs (loop5): invalid media value (0x00) 07:03:32 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4a4100, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000200)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000280)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0xffffffffffffffff, r0, 0x0, 0x9, &(0x7f00000002c0)='&*^wlan0\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000340)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000380)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) 07:03:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x18000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) [ 591.611988][T26998] FAT-fs (loop5): Can't find a valid FAT filesystem [ 591.748330][T27004] FAT-fs (loop4): bogus number of reserved sectors [ 591.778452][T27004] FAT-fs (loop4): Can't find a valid FAT filesystem 07:03:33 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') exit(0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f00000000c0)={0x0, @bt={0x4, 0x1, 0x1, 0x0, 0x1, 0x80000000, 0x43d7, 0x2, 0x1bd, 0x800, 0x3572a07, 0x1000, 0x5, 0x41d, 0x2, 0x20}}) sendfile(r0, r0, 0x0, 0x3) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0xffffffffffffff81, &(0x7f0000000040)=0x4) 07:03:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000680)) 07:03:33 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:33 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4a4100, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000200)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000280)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0xffffffffffffffff, r0, 0x0, 0x9, &(0x7f00000002c0)='&*^wlan0\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000340)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000380)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) 07:03:33 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:33 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x1e000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) [ 592.309552][T27024] FAT-fs (loop4): bogus number of reserved sectors [ 592.333283][T27028] FAT-fs (loop5): invalid media value (0x00) 07:03:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000680)) 07:03:33 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4a4100, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000200)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000280)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0xffffffffffffffff, r0, 0x0, 0x9, &(0x7f00000002c0)='&*^wlan0\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000340)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000380)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) [ 592.368038][T27024] FAT-fs (loop4): Can't find a valid FAT filesystem [ 592.374612][T27028] FAT-fs (loop5): Can't find a valid FAT filesystem 07:03:33 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x24000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/11, 0xb) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000680)) 07:03:33 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:33 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4a4100, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000200)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000280)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0xffffffffffffffff, r0, 0x0, 0x9, &(0x7f00000002c0)='&*^wlan0\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000340)) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='cgroup\x00') sendfile(r1, r1, 0x0, 0x3) [ 592.567794][T27047] FAT-fs (loop5): invalid media value (0x00) [ 592.584461][T27047] FAT-fs (loop5): Can't find a valid FAT filesystem 07:03:34 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') exit(0x0) getresuid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)=0x0) getresuid(&(0x7f0000000480)=0x0, &(0x7f00000004c0), &(0x7f0000000500)) r3 = getuid() syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x1, 0x4, &(0x7f0000000340)=[{&(0x7f0000000180)="9024d711d66f231ccfdb7d14534df438e45845d7baae989a1874999c80277d933f4baea83860d47bd6b7eede0a4f826fb3aadd6849c162c6c6fa13d6beb2a5e474c2144f057a439747145dd11909a5ee5672e899b23f6f61eb2d0e5a4177f4b900", 0x61}, {&(0x7f0000000200)="321a319884c934409c570146", 0xc, 0x8}, {&(0x7f0000000240)="423d714ad8a21c7558a6383a35b550578fad643d1158632101058e0e5945fec60cfdf8cf6335a365b1eea2dcefb937d93fb90dfa922eb23e09b8893df78da0ff2a0d0ea520354e975af65cf18a687214c1834ff0aed789f320ff4a77c42fb6ebffac1e646dc4c7fd909a5a86bebb6fd98fa4f1ae0c67efe5a680db62c16d67ec8b86b8abf1e1574c700663d8f797966ed5c9541c", 0x94}, {&(0x7f0000000300)="0e90f0", 0x3, 0x5}], 0x800000, &(0x7f0000000540)={[{@part={'part', 0x3d, 0x1}}, {@type={'type', 0x3d, "10455efc"}}], [{@smackfsdef={'smackfsdef', 0x3d, 'oom_adj\x00'}}, {@uid_eq={'uid', 0x3d, r1}}, {@uid_gt={'uid>', r2}}, {@smackfstransmute={'smackfstransmute'}}, {@euid_eq={'euid', 0x3d, r3}}, {@func={'func', 0x3d, 'FILE_MMAP'}}]}) sendfile(r0, r0, 0x0, 0x3) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000000c0)={'filter\x00', 0x0, 0x0, 0x0, [], 0x3, &(0x7f0000000000), 0x0, [{}, {}, {}]}, 0xa8) 07:03:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:34 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:34 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4a4100, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000200)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000280)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0xffffffffffffffff, r0, 0x0, 0x9, &(0x7f00000002c0)='&*^wlan0\x00', 0xffffffffffffffff}, 0x30) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='cgroup\x00') sendfile(r1, r1, 0x0, 0x3) 07:03:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x2a000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) [ 593.238856][T27064] FAT-fs (loop5): invalid media value (0x00) [ 593.240454][T27068] FAT-fs (loop4): bogus number of reserved sectors [ 593.259012][T27064] FAT-fs (loop5): Can't find a valid FAT filesystem 07:03:34 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4a4100, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000200)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000280)) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='cgroup\x00') sendfile(r1, r1, 0x0, 0x3) [ 593.287553][T27068] FAT-fs (loop4): Can't find a valid FAT filesystem 07:03:34 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/11, 0xb) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000680)) 07:03:34 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4a4100, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000200)) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='cgroup\x00') sendfile(r1, r1, 0x0, 0x3) [ 593.388343][T27066] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 593.401402][T27080] hfsplus: unable to parse mount options 07:03:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) [ 593.429064][T27066] FAT-fs (loop1): Filesystem has been set read-only 07:03:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x30000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) [ 593.474187][T27088] FAT-fs (loop5): invalid media value (0x00) [ 593.499121][T27088] FAT-fs (loop5): Can't find a valid FAT filesystem 07:03:34 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4a4100, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='cgroup\x00') sendfile(r1, r1, 0x0, 0x3) [ 593.524902][T27094] FAT-fs (loop4): bogus number of reserved sectors [ 593.541306][T27094] FAT-fs (loop4): Can't find a valid FAT filesystem 07:03:35 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x8001, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000040)={'veth1_to_team\x00', {0x2, 0x4e21, @remote}}) exit(0x0) listen(r1, 0x401) sendfile(r1, r1, 0x0, 0x3) 07:03:35 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:35 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:35 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4a4100, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='cgroup\x00') sendfile(r0, r0, 0x0, 0x3) 07:03:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x36000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:35 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='cgroup\x00') sendfile(r0, r0, 0x0, 0x3) [ 594.209920][T27116] FAT-fs (loop4): bogus number of reserved sectors [ 594.220935][T27116] FAT-fs (loop4): Can't find a valid FAT filesystem [ 594.253268][T27118] FAT-fs (loop5): invalid media value (0x00) [ 594.269078][T27118] FAT-fs (loop5): Can't find a valid FAT filesystem 07:03:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/11, 0xb) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000680)) 07:03:35 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:35 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x3c000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:35 executing program 2: r0 = syz_open_procfs(0x0, 0x0) sendfile(r0, r0, 0x0, 0x3) 07:03:35 executing program 2: r0 = syz_open_procfs(0x0, 0x0) sendfile(r0, r0, 0x0, 0x3) [ 594.516562][T27134] FAT-fs (loop5): invalid media value (0x00) [ 594.529726][T27136] FAT-fs (loop4): bogus number of reserved sectors [ 594.539886][T27134] FAT-fs (loop5): Can't find a valid FAT filesystem [ 594.571072][T27136] FAT-fs (loop4): Can't find a valid FAT filesystem 07:03:36 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) eventfd2(0x38d4, 0x800) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') exit(0x0) sendfile(r0, r0, 0x0, 0x3) 07:03:36 executing program 2: r0 = syz_open_procfs(0x0, 0x0) sendfile(r0, r0, 0x0, 0x3) 07:03:36 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:36 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x3f000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) [ 595.180980][T27155] FAT-fs (loop5): invalid media value (0x00) [ 595.209750][T27160] FAT-fs (loop4): bogus number of reserved sectors [ 595.213096][T27155] FAT-fs (loop5): Can't find a valid FAT filesystem 07:03:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, 0x0) 07:03:36 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='cgroup\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x3) [ 595.243160][T27160] FAT-fs (loop4): Can't find a valid FAT filesystem 07:03:36 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='cgroup\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x3) 07:03:36 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:36 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x40000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:36 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='cgroup\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x3) [ 595.480190][T27177] FAT-fs (loop5): invalid media value (0x00) [ 595.521914][T27177] FAT-fs (loop5): Can't find a valid FAT filesystem [ 595.620182][T27181] FAT-fs (loop4): bogus number of reserved sectors [ 595.666763][T27181] FAT-fs (loop4): Can't find a valid FAT filesystem [ 595.792346][T27184] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 595.810201][T27184] FAT-fs (loop1): Filesystem has been set read-only 07:03:37 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)='oom_adj\x00', 0xffffffffffffffff}, 0x30) r1 = syz_open_procfs(r0, &(0x7f00000001c0)='ooWmO%\x99\xe3\x97\xfb\x15\xf3\xd3\ny\xe1\x9aFC\xf8\x9c\xc3\xc0\x7f\x81r\xcf\a\xfb\x15P\x87(8\b\x8c\x9d\xae\xd3pTBS\x99\"\x17\x10\x87`?w\xa7d\xbb7\xbf\xad%K\xe3;i7\xfc\xb7\xa5B\x06\xce\xc1\xa6\x17\xba\xe8w\"\xfc\xc9~\x1c\va\xac\xe1\x02U\xc2B\x85\xfc\x15oh\x9e\x1b\xafm\x9d\xe6.\xa7lx\x8d\x93\xda$r\xf9Ok{ISH\x0fO\xd5b\xab\x16\xb9\xb8\x17\xbc\xa2\t\xba\x8e\x88\xe2\xc4\xa4\xb6\x9d^\\X\x81\\\x9a\xe6s\x1ck\xb7\xd0n\\A\xde\xe0\xe3\x9eA\x97r\xfbS\xe8}X\xff\x9e:(\b\xf6\x90\xdd\x93\xc7\x0e\x92\x02$)\x86\f\x19\x033\xee\x9d\v\xcb\n\x95:\xc0qP\x90Au`ohz\xe26\xc0NJ\x12\xb1l\x8eV\xf9\xbc/p\xff\xdc#\xf0\xc22|\xd10I\x1b\x06\xb4\xc7\xb8\xd9\xa55\x9bY\xb8A\x18\x15\xab4J\x9f6Q\xad\x13\xe8Ig\xc4\x14\xeb\xbc\x89\xf7E\xb0\x86\x1f\v\xa6\x00\xc6\xc8\xf4\x17d\xb1\xf4\r\xe0\t\xbc\x9b\xb3\xeee\xa9\xef\x86\xe1\xbbs\xaem;O\x013\xcf~Uo\xb1`\xd9\xbf?\x0e_\xeeG\x1f\xbe\xa6\xddU\xf2\xca\xee0\x0f\xb4\x02\x06&%\xa0x\xady`\x16\x18\x10\xf8\x12\xd6\xc0\x9e\xb5I\xd4O\x9e\xa0H)\xa2\xdf\x06\x05\x13\xe7]d\xe8\x89\xaf\xda2=\xe6V\xf7eM') getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0xb) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f00000000c0)={0x10001, 0x7, 0x1}) exit(0x800040363) sendfile(r1, r1, 0x0, 0x3) 07:03:37 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='cgroup\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x3) 07:03:37 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:37 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x42000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='cgroup\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x3) 07:03:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, 0x0) [ 596.177097][T27196] FAT-fs (loop4): bogus number of reserved sectors [ 596.196700][T27196] FAT-fs (loop4): Can't find a valid FAT filesystem 07:03:37 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:37 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='cgroup\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x3) 07:03:37 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x48000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='cgroup\x00') sendfile(r0, r0, 0x0, 0x0) [ 596.509304][T27222] FAT-fs (loop4): bogus number of reserved sectors [ 596.559155][T27222] FAT-fs (loop4): Can't find a valid FAT filesystem 07:03:38 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') exit(0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000000)={0xb, 0x8, 0x4}) tee(r0, r0, 0x7fffffff, 0x2) sendfile(r0, r0, 0x0, 0x3) 07:03:38 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:38 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='cgroup\x00') sendfile(r0, r0, 0x0, 0x0) 07:03:38 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:38 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x4e000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, 0x0) [ 597.128953][T27236] FAT-fs (loop4): bogus number of reserved sectors [ 597.143064][T27236] FAT-fs (loop4): Can't find a valid FAT filesystem 07:03:38 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='cgroup\x00') sendfile(r0, r0, 0x0, 0x0) 07:03:38 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:38 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:38 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:38 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x54000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) [ 597.448705][T27261] FAT-fs (loop4): bogus number of reserved sectors 07:03:38 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) [ 597.519447][T27261] FAT-fs (loop4): Can't find a valid FAT filesystem 07:03:39 executing program 0: r0 = accept(0xffffffffffffff9c, &(0x7f00000000c0)=@nl=@proc, &(0x7f0000000040)=0x80) r1 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x5, 0x40) splice(r0, &(0x7f0000000140), r1, &(0x7f00000001c0), 0x6, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000000)) exit(0x0) sendfile(r2, r2, 0x0, 0x3) 07:03:39 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x4e000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:39 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:39 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x5a000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:39 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:39 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x40000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) [ 598.081874][T27290] FAT-fs (loop4): bogus number of reserved sectors [ 598.117689][T27290] FAT-fs (loop4): Can't find a valid FAT filesystem 07:03:39 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(0x0, 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:39 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:39 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x60000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) [ 598.380958][T27308] FAT-fs (loop4): bogus number of reserved sectors [ 598.398913][T27308] FAT-fs (loop4): Can't find a valid FAT filesystem 07:03:39 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x5a000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:39 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(0x0, 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:39 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) [ 598.651265][T27319] FAT-fs (loop4): bogus number of reserved sectors [ 598.671866][T27319] FAT-fs (loop4): Can't find a valid FAT filesystem 07:03:39 executing program 0: syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') exit(0x8) r0 = request_key(&(0x7f0000000000)='trusted\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000000c0)='\x00', 0xfffffffffffffffa) r1 = request_key(&(0x7f0000000140)='trusted\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/)\'systemppp1\x00', 0xfffffffffffffffb) keyctl$instantiate(0xc, r0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'oom_adj\x00'}, 0x1d, r1) 07:03:39 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x40000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:39 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x66000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:39 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:39 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(0x0, 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:39 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x2a000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) [ 598.964836][T27338] FAT-fs (loop4): invalid media value (0x00) [ 599.020604][T27338] FAT-fs (loop4): Can't find a valid FAT filesystem 07:03:40 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:40 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x6c000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:40 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x66000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:40 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) [ 599.409162][T27365] FAT-fs (loop4): invalid media value (0x00) [ 599.423878][T27365] FAT-fs (loop4): Can't find a valid FAT filesystem [ 599.571470][T27369] FAT-fs (loop3): invalid media value (0x00) [ 599.600158][T27369] FAT-fs (loop3): Can't find a valid FAT filesystem 07:03:40 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') exit(0xffffffffffffffff) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x90000002, 0x0) sendfile(r0, r0, 0x0, 0x3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x40, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e22, 0x1, @mcast1, 0x5}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e22, 0x9, @empty, 0x8}, @in6={0xa, 0x4e22, 0x9, @loopback, 0xffff}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x29}}], 0xd0) 07:03:40 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000680)) 07:03:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x72000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:40 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:41 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x12000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000680)) [ 599.917892][T27390] FAT-fs (loop4): invalid media value (0x00) [ 599.941517][T27390] FAT-fs (loop4): Can't find a valid FAT filesystem 07:03:41 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:41 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000680)) 07:03:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x78000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) [ 600.241010][T27415] FAT-fs (loop4): invalid media value (0x00) [ 600.280610][T27415] FAT-fs (loop4): Can't find a valid FAT filesystem 07:03:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, 0x0, 0x0) 07:03:41 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') exit(0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xcc) sendfile(r1, r0, 0x0, 0x1) 07:03:41 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:41 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:41 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x12000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:41 executing program 3: read(0xffffffffffffffff, 0x0, 0x0) 07:03:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x7e000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:41 executing program 3: read(0xffffffffffffffff, 0x0, 0x0) 07:03:42 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) [ 600.853215][T27443] FAT-fs (loop4): invalid media value (0x00) [ 600.886714][T27443] FAT-fs (loop4): Can't find a valid FAT filesystem [ 600.939534][T27432] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 600.998226][T27432] FAT-fs (loop1): Filesystem has been set read-only 07:03:42 executing program 3: read(0xffffffffffffffff, 0x0, 0x0) 07:03:42 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:42 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x7f510100, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:42 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x7e000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) [ 601.240032][T27465] FAT-fs (loop4): invalid media value (0x00) [ 601.274078][T27465] FAT-fs (loop4): Can't find a valid FAT filesystem [ 601.421443][T27470] FAT-fs (loop2): error, invalid access to FAT (entry 0x00006500) [ 601.429291][T27470] FAT-fs (loop2): Filesystem has been set read-only 07:03:42 executing program 0: r0 = getpgid(0x0) r1 = syz_open_procfs(r0, &(0x7f0000000240)='net/ip6_tables_u\x7fname') exit(0x0) sendfile(r1, r1, 0x0, 0x3) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x0, [], [{0x400, 0x4, 0x3f, 0x3, 0x6, 0xffffffffffffffff}, {0x0, 0x5, 0x2, 0x10000, 0x576bda44, 0x3e57}], [[], []]}) 07:03:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r0, 0x0, 0x0) 07:03:42 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(0x0) sched_setattr(0x0, 0x0, 0x0) 07:03:42 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:42 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x84000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:42 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x12000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r0, 0x0, 0x0) [ 601.768314][T27487] FAT-fs (loop4): invalid media value (0x00) [ 601.829851][T27487] FAT-fs (loop4): Can't find a valid FAT filesystem 07:03:43 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(0x0) sched_setattr(0x0, 0x0, 0x0) 07:03:43 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:43 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x8a000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r0, 0x0, 0x0) 07:03:43 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xf000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) [ 602.099348][T27503] FAT-fs (loop4): invalid media value (0x00) [ 602.135409][T27503] FAT-fs (loop4): Can't find a valid FAT filesystem [ 602.359912][T27516] FAT-fs (loop2): error, invalid access to FAT (entry 0x00006500) [ 602.369851][T27516] FAT-fs (loop2): Filesystem has been set read-only 07:03:43 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') exit(0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f00000000c0)=0x5) sendfile(r0, r0, 0x0, 0x3) openat$cgroup_ro(r0, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) 07:03:43 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/ptmx\x00', 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) 07:03:43 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:43 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(0x0) sched_setattr(0x0, 0x0, 0x0) 07:03:43 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xfeffffff, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:43 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xc000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:43 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/ptmx\x00', 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) 07:03:43 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xc000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) [ 602.809584][T27535] FAT-fs (loop4): invalid media value (0x00) [ 602.841490][T27535] FAT-fs (loop4): Can't find a valid FAT filesystem 07:03:44 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/ptmx\x00', 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) 07:03:44 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:44 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x4000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:44 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xff0f0000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:44 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') exit(0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20, 0x0, 0x1, {0x9, 0x4, 0x7, 0x5}}, 0x20) sendfile(r0, r0, 0x0, 0x3) 07:03:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x4000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:44 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x4000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:44 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:44 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xffffff7f, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:44 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x1517f, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:44 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) [ 603.862454][T27573] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 603.870327][T27573] FAT-fs (loop1): Filesystem has been set read-only 07:03:45 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xfffffffe, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:45 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xffffff7f, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:45 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:45 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xffffff7f, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x7e00, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) [ 604.507926][T27606] FAT-fs (loop3): error, invalid access to FAT (entry 0x00006500) [ 604.529149][T27606] FAT-fs (loop3): Filesystem has been set read-only 07:03:45 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') exit(0x3) sendfile(r0, r0, 0x0, 0x3) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x80000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {r1, 0x2f, "947142", "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"}}, 0x110) 07:03:45 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xffffffff000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:45 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x7800, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x7e00, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:45 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:45 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x7800, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:46 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xf0ffffff0f0000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:46 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xffffffff000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:46 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:46 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x7200, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:46 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(0x0, 0x1fe, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) [ 605.322096][T27655] FAT-fs (loop3): bogus number of reserved sectors [ 605.330999][T27655] FAT-fs (loop3): Can't find a valid FAT filesystem [ 605.435646][T27657] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 605.452533][T27657] FAT-fs (loop5): Filesystem has been set read-only 07:03:46 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') exit(0x0) sendfile(r0, r0, 0x0, 0x4) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0xffffffffffffff01, 0x4) 07:03:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x100000000000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:46 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(0x0, 0x1fe, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:46 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x6c00, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:46 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x6000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:46 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x600, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:46 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(0x0, 0x1fe, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) [ 605.787767][T27670] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) 07:03:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x84, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) [ 605.843511][T27670] FAT-fs (loop1): Filesystem has been set read-only [ 605.877760][T27676] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) 07:03:47 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x200000000000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) [ 605.931471][T27676] FAT-fs (loop5): Filesystem has been set read-only 07:03:47 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x100000000000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:47 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:47 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x7e, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) [ 606.139873][T27696] FAT-fs (loop3): error, invalid access to FAT (entry 0x00006500) [ 606.159334][T27696] FAT-fs (loop3): Filesystem has been set read-only 07:03:47 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='ctat\x00') r1 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x400007ffffffd, 0x40002) sendfile(r1, r0, &(0x7f0000000000), 0x6000000000) exit(0x0) lookup_dcookie(0xdb, &(0x7f0000000040)=""/177, 0xb1) sendfile(r0, r0, 0x0, 0x80000000) 07:03:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x7e, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:47 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x400000000000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:47 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x200000000000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:47 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) 07:03:47 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x2a, 0x8080fffffffe) sched_setattr(0x0, 0x0, 0x0) 07:03:47 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) [ 606.799251][T27719] FAT-fs (loop3): error, invalid access to FAT (entry 0x00006500) 07:03:48 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x78, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) [ 606.870083][T27719] FAT-fs (loop3): Filesystem has been set read-only 07:03:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x2a, 0x8080fffffffe) r2 = getpid() sched_setattr(r2, 0x0, 0x0) 07:03:48 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x72, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:48 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x600000000000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:48 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) unlink(0x0) sched_setattr(0x0, 0x0, 0x0) 07:03:48 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') exit(0x0) getsockname$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000040)=0x10) sendfile(r0, r0, 0x0, 0x3) 07:03:48 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000080), &(0x7f0000000100)=0x6) r1 = socket(0x8, 0x3, 0x3) connect$x25(r1, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x98) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000480)={0x18d0ca8f094b32c0, 0x2, 0x0, 0x1}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x5, 0x30, 0x2576, 0x2}, &(0x7f0000000140)=0x18) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r3}, &(0x7f00000001c0)=0x8) sendmsg$key(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x2, 0xd, 0x671, 0x2, 0x2, 0x0, 0x70bd2d, 0x25dfdbfd}, 0x10}}, 0x4000) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x4040, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r4, 0x40086408, &(0x7f0000000400)={0x7, 0x4}) io_setup(0xe0, &(0x7f0000000200)=0x0) io_pgetevents(r5, 0xffffffffffffffb3, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000300), &(0x7f0000000380)={&(0x7f0000000340)={0x7}, 0x8}) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x80000000, 0x0, 0xfffffffffffffffe}, 0xfffe}, 0xe) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) 07:03:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x5a, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:48 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x5a, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:48 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xc00000000000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:48 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) unlink(0x0) sched_setattr(0x0, 0x0, 0x0) 07:03:48 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000080), &(0x7f0000000100)=0x6) r1 = socket(0x8, 0x3, 0x3) connect$x25(r1, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x98) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000480)={0x18d0ca8f094b32c0, 0x2, 0x0, 0x1}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x5, 0x30, 0x2576, 0x2}, &(0x7f0000000140)=0x18) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r3}, &(0x7f00000001c0)=0x8) sendmsg$key(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x2, 0xd, 0x671, 0x2, 0x2, 0x0, 0x70bd2d, 0x25dfdbfd}, 0x10}}, 0x4000) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x4040, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r4, 0x40086408, &(0x7f0000000400)={0x7, 0x4}) io_setup(0xe0, &(0x7f0000000200)=0x0) io_pgetevents(r5, 0xffffffffffffffb3, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000300), &(0x7f0000000380)={&(0x7f0000000340)={0x7}, 0x8}) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x80000000, 0x0, 0xfffffffffffffffe}, 0xfffe}, 0xe) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) 07:03:48 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) unlink(0x0) sched_setattr(0x0, 0x0, 0x0) 07:03:48 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) 07:03:48 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xf00000000000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x2a, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) 07:03:49 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x54, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:49 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = request_key(&(0x7f0000000180)='id_legacy\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)='\x00', 0xfffffffffffffff9) keyctl$get_security(0x11, r0, &(0x7f0000000280), 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vfio/vfio\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x2, 0x3, 0x7) getsockopt$sock_buf(r2, 0x1, 0x24, &(0x7f0000e530e9)=""/16, &(0x7f00000001c0)=0x10) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x18000, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f00000000c0)={r4}) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') exit(0x0) sendfile(r5, r5, 0x0, 0x3) 07:03:49 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000080), &(0x7f0000000100)=0x6) r1 = socket(0x8, 0x3, 0x3) connect$x25(r1, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x98) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000480)={0x18d0ca8f094b32c0, 0x2, 0x0, 0x1}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x5, 0x30, 0x2576, 0x2}, &(0x7f0000000140)=0x18) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r3}, &(0x7f00000001c0)=0x8) sendmsg$key(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x2, 0xd, 0x671, 0x2, 0x2, 0x0, 0x70bd2d, 0x25dfdbfd}, 0x10}}, 0x4000) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x4040, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r4, 0x40086408, &(0x7f0000000400)={0x7, 0x4}) io_setup(0xe0, &(0x7f0000000200)=0x0) io_pgetevents(r5, 0xffffffffffffffb3, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000300), &(0x7f0000000380)={&(0x7f0000000340)={0x7}, 0x8}) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x80000000, 0x0, 0xfffffffffffffffe}, 0xfffe}, 0xe) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) 07:03:49 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x30, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:49 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x1000000000000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x24, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:49 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x24, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:49 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000080), &(0x7f0000000100)=0x6) r1 = socket(0x8, 0x3, 0x3) connect$x25(r1, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x98) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000480)={0x18d0ca8f094b32c0, 0x2, 0x0, 0x1}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x5, 0x30, 0x2576, 0x2}, &(0x7f0000000140)=0x18) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r3}, &(0x7f00000001c0)=0x8) sendmsg$key(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x2, 0xd, 0x671, 0x2, 0x2, 0x0, 0x70bd2d, 0x25dfdbfd}, 0x10}}, 0x4000) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x4040, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r4, 0x40086408, &(0x7f0000000400)={0x7, 0x4}) io_setup(0xe0, &(0x7f0000000200)=0x0) io_pgetevents(r5, 0xffffffffffffffb3, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000300), &(0x7f0000000380)={&(0x7f0000000340)={0x7}, 0x8}) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x80000000, 0x0, 0xfffffffffffffffe}, 0xfffe}, 0xe) [ 608.771171][T27820] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) [ 608.798571][T27813] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 608.806893][T27820] FAT-fs (loop4): Filesystem has been set read-only 07:03:49 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x1200000000000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) [ 608.842245][T27813] FAT-fs (loop5): Filesystem has been set read-only 07:03:50 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x30, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:50 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) modify_ldt$write(0x1, &(0x7f0000000000)={0x5, 0xffffffffffffffff, 0x0, 0x7, 0x800, 0x3, 0x0, 0x81, 0x1, 0x2}, 0x10) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x2000000000000002, 0x621a00, 0x0, 0x0, 0x8000000000}, 0x4}, 0xe) ioperm(0x0, 0x5, 0x7) 07:03:50 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000080), &(0x7f0000000100)=0x6) r1 = socket(0x8, 0x3, 0x3) connect$x25(r1, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x98) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000480)={0x18d0ca8f094b32c0, 0x2, 0x0, 0x1}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x5, 0x30, 0x2576, 0x2}, &(0x7f0000000140)=0x18) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r3}, &(0x7f00000001c0)=0x8) sendmsg$key(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x2, 0xd, 0x671, 0x2, 0x2, 0x0, 0x70bd2d, 0x25dfdbfd}, 0x10}}, 0x4000) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x4040, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r4, 0x40086408, &(0x7f0000000400)={0x7, 0x4}) io_setup(0xe0, &(0x7f0000000200)=0x0) io_pgetevents(r5, 0xffffffffffffffb3, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000300), &(0x7f0000000380)={&(0x7f0000000340)={0x7}, 0x8}) 07:03:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x18, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:50 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') r1 = fcntl$getown(r0, 0x9) setpriority(0x2, r1, 0x9e4c) exit(0x0) sendfile(r0, r0, 0x0, 0x3) 07:03:50 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x12, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:50 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000080), &(0x7f0000000100)=0x6) r1 = socket(0x8, 0x3, 0x3) connect$x25(r1, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x98) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000480)={0x18d0ca8f094b32c0, 0x2, 0x0, 0x1}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x5, 0x30, 0x2576, 0x2}, &(0x7f0000000140)=0x18) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r3}, &(0x7f00000001c0)=0x8) sendmsg$key(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x2, 0xd, 0x671, 0x2, 0x2, 0x0, 0x70bd2d, 0x25dfdbfd}, 0x10}}, 0x4000) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x4040, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r4, 0x40086408, &(0x7f0000000400)={0x7, 0x4}) io_setup(0xe0, &(0x7f0000000200)) 07:03:50 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x1800000000000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x12, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:50 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x10, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:50 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000080), &(0x7f0000000100)=0x6) r1 = socket(0x8, 0x3, 0x3) connect$x25(r1, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x98) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000480)={0x18d0ca8f094b32c0, 0x2, 0x0, 0x1}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x5, 0x30, 0x2576, 0x2}, &(0x7f0000000140)=0x18) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r3}, &(0x7f00000001c0)=0x8) sendmsg$key(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x2, 0xd, 0x671, 0x2, 0x2, 0x0, 0x70bd2d, 0x25dfdbfd}, 0x10}}, 0x4000) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x4040, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r4, 0x40086408, &(0x7f0000000400)={0x7, 0x4}) [ 609.744194][T27857] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 609.744669][T27856] FAT-fs (loop3): error, invalid access to FAT (entry 0x00006500) [ 609.776627][T27856] FAT-fs (loop3): Filesystem has been set read-only [ 609.807724][T27857] FAT-fs (loop5): Filesystem has been set read-only 07:03:50 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x4000000000000, 0x0) sendto$llc(r0, &(0x7f0000000300)="69b99e6f29edac5e4ea532766796de1c9638135aeea44292fefcb4401131fc13d13c9d771300f1b959ba363bb4c97f4e374f2eee46bfd59f8d8a2d5f00c3b244704914e0ed3e5f62f3130fd35e5e2a521bb368df8198d2be4fec65b86d5384dc596d10b89b07b6041f6c67bffd2793e26966cee46459a2a0cd850b15652f0b09e98709e535e0975cbfba396bec87e89985ac9089f151a62409f2afe3568d9b961760b58b6b6dd5f41b00501eb136d9a2b5742f556d0744b8df032bedf16d57abb6b8ae6defed205a24dbe97218560fcf84823500fb74d8a02c7d1dc919d0482b7e765eab35f0f4078660a9bea1d064423883f11cacbef6f1118f9d2a14abbd0a5f9e7758a0d5d8d030fb805412d14605000000000000fbf19b30c68a6a1a0f834a81b77bbad9c09153a2f217f8973e4234969911b6092d2908361d70ee4faf455af52429da5830746625541cad5d5c54b165a14bbace20ffec54878278bb253560362a", 0x163, 0x20000080, &(0x7f0000000140)={0x1a, 0xfffe, 0x98d1, 0x5808, 0x80000001, 0x1}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080)={0x3, 0x200}, 0x2) fsetxattr$security_ima(r1, &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0502010000e6028c006c4d77b686004e4dedae2d1446e3167665236b53abbaa67c1926d5eb345ddded70b7c6f9ec3dd215375999f86a1a89dd25d80f4c86ebe04f96c7a2ed1b80f7e4ad15f44c7f546693ade3f3a6a53d0928d6c9a885eafa2375736129871fbb25fbf4aa388abc547418e68a1a"], 0x76, 0x2) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f0000000040)) bind$bt_l2cap(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000280)={0x6, 0x200, 0x2, 0x8, 0x0}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000480)=@sack_info={0x0, 0x401, 0x7}, &(0x7f00000004c0)=0xc) sendmsg$inet_sctp(r0, &(0x7f0000000640)={&(0x7f0000000100)=@in={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000200)="1f9b0a8e4b652b", 0x7}], 0x1, &(0x7f0000000500)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0x2}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x77d}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @dstaddrv4={0x18, 0x84, 0x7, @local}, @authinfo={0x18, 0x84, 0x6, {0x76ffe135}}, @sndinfo={0x20, 0x84, 0x2, {0xfaa, 0x6, 0x7fff, 0x819, r2}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x8}}, @sndrcv={0x30, 0x84, 0x1, {0x2, 0x101, 0x1, 0x800, 0xfffffffffffffffe, 0x8, 0x8, 0xc8e0, r3}}, @authinfo={0x18, 0x84, 0x6, {0x3}}], 0x118, 0x800}, 0x4000) 07:03:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x1e00000000000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:51 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) signalfd4(r0, &(0x7f0000000080)={0x4}, 0x8, 0x80000) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) 07:03:51 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000080), &(0x7f0000000100)=0x6) r1 = socket(0x8, 0x3, 0x3) connect$x25(r1, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x98) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000480)={0x18d0ca8f094b32c0, 0x2, 0x0, 0x1}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x5, 0x30, 0x2576, 0x2}, &(0x7f0000000140)=0x18) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r3}, &(0x7f00000001c0)=0x8) sendmsg$key(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x2, 0xd, 0x671, 0x2, 0x2, 0x0, 0x70bd2d, 0x25dfdbfd}, 0x10}}, 0x4000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x4040, 0x0) 07:03:51 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x4000000000000, 0x0) sendto$llc(r0, &(0x7f0000000300)="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", 0x163, 0x20000080, &(0x7f0000000140)={0x1a, 0xfffe, 0x98d1, 0x5808, 0x80000001, 0x1}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080)={0x3, 0x200}, 0x2) fsetxattr$security_ima(r1, &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0502010000e6028c006c4d77b686004e4dedae2d1446e3167665236b53abbaa67c1926d5eb345ddded70b7c6f9ec3dd215375999f86a1a89dd25d80f4c86ebe04f96c7a2ed1b80f7e4ad15f44c7f546693ade3f3a6a53d0928d6c9a885eafa2375736129871fbb25fbf4aa388abc547418e68a1a"], 0x76, 0x2) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f0000000040)) bind$bt_l2cap(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000280)={0x6, 0x200, 0x2, 0x8, 0x0}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000480)=@sack_info={0x0, 0x401, 0x7}, &(0x7f00000004c0)=0xc) sendmsg$inet_sctp(r0, &(0x7f0000000640)={&(0x7f0000000100)=@in={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000200)="1f9b0a8e4b652b", 0x7}], 0x1, &(0x7f0000000500)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0x2}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x77d}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @dstaddrv4={0x18, 0x84, 0x7, @local}, @authinfo={0x18, 0x84, 0x6, {0x76ffe135}}, @sndinfo={0x20, 0x84, 0x2, {0xfaa, 0x6, 0x7fff, 0x819, r2}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x8}}, @sndrcv={0x30, 0x84, 0x1, {0x2, 0x101, 0x1, 0x800, 0xfffffffffffffffe, 0x8, 0x8, 0xc8e0, r3}}, @authinfo={0x18, 0x84, 0x6, {0x3}}], 0x118, 0x800}, 0x4000) 07:03:51 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') exit(0x0) sendfile(r0, r0, 0x0, 0x3) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000000)) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0xd000) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000040)='veth1_to_bond\x00') 07:03:51 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x4, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:51 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000080), &(0x7f0000000100)=0x6) r1 = socket(0x8, 0x3, 0x3) connect$x25(r1, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x98) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000480)={0x18d0ca8f094b32c0, 0x2, 0x0, 0x1}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x5, 0x30, 0x2576, 0x2}, &(0x7f0000000140)=0x18) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r3}, &(0x7f00000001c0)=0x8) sendmsg$key(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x2, 0xd, 0x671, 0x2, 0x2, 0x0, 0x70bd2d, 0x25dfdbfd}, 0x10}}, 0x4000) 07:03:51 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x4000000000000, 0x0) sendto$llc(r0, &(0x7f0000000300)="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", 0x163, 0x20000080, &(0x7f0000000140)={0x1a, 0xfffe, 0x98d1, 0x5808, 0x80000001, 0x1}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080)={0x3, 0x200}, 0x2) fsetxattr$security_ima(r1, &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0502010000e6028c006c4d77b686004e4dedae2d1446e3167665236b53abbaa67c1926d5eb345ddded70b7c6f9ec3dd215375999f86a1a89dd25d80f4c86ebe04f96c7a2ed1b80f7e4ad15f44c7f546693ade3f3a6a53d0928d6c9a885eafa2375736129871fbb25fbf4aa388abc547418e68a1a"], 0x76, 0x2) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f0000000040)) bind$bt_l2cap(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000280)={0x6, 0x200, 0x2, 0x8, 0x0}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000480)=@sack_info={0x0, 0x401, 0x7}, &(0x7f00000004c0)=0xc) sendmsg$inet_sctp(r0, &(0x7f0000000640)={&(0x7f0000000100)=@in={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000200)="1f9b0a8e4b652b", 0x7}], 0x1, &(0x7f0000000500)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0x2}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x77d}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @dstaddrv4={0x18, 0x84, 0x7, @local}, @authinfo={0x18, 0x84, 0x6, {0x76ffe135}}, @sndinfo={0x20, 0x84, 0x2, {0xfaa, 0x6, 0x7fff, 0x819, r2}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x8}}, @sndrcv={0x30, 0x84, 0x1, {0x2, 0x101, 0x1, 0x800, 0xfffffffffffffffe, 0x8, 0x8, 0xc8e0, r3}}, @authinfo={0x18, 0x84, 0x6, {0x3}}], 0x118, 0x800}, 0x4000) 07:03:51 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) signalfd4(r0, &(0x7f0000000080)={0x4}, 0x8, 0x80000) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) 07:03:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x2400000000000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:51 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000080), &(0x7f0000000100)=0x6) r1 = socket(0x8, 0x3, 0x3) connect$x25(r1, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x98) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000480)={0x18d0ca8f094b32c0, 0x2, 0x0, 0x1}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x5, 0x30, 0x2576, 0x2}, &(0x7f0000000140)=0x18) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r3}, &(0x7f00000001c0)=0x8) 07:03:51 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) signalfd4(r0, &(0x7f0000000080)={0x4}, 0x8, 0x80000) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) 07:03:51 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x4000000000000, 0x0) sendto$llc(r0, &(0x7f0000000300)="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", 0x163, 0x20000080, &(0x7f0000000140)={0x1a, 0xfffe, 0x98d1, 0x5808, 0x80000001, 0x1}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080)={0x3, 0x200}, 0x2) fsetxattr$security_ima(r1, &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0502010000e6028c006c4d77b686004e4dedae2d1446e3167665236b53abbaa67c1926d5eb345ddded70b7c6f9ec3dd215375999f86a1a89dd25d80f4c86ebe04f96c7a2ed1b80f7e4ad15f44c7f546693ade3f3a6a53d0928d6c9a885eafa2375736129871fbb25fbf4aa388abc547418e68a1a"], 0x76, 0x2) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f0000000040)) bind$bt_l2cap(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000280)={0x6, 0x200, 0x2, 0x8}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000480)=@sack_info={0x0, 0x401, 0x7}, &(0x7f00000004c0)=0xc) 07:03:51 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000080), &(0x7f0000000100)=0x6) r1 = socket(0x8, 0x3, 0x3) connect$x25(r1, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x98) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000480)={0x18d0ca8f094b32c0, 0x2, 0x0, 0x1}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x5, 0x30, 0x2576, 0x2}, &(0x7f0000000140)=0x18) 07:03:51 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x4000000000000, 0x0) sendto$llc(r0, &(0x7f0000000300)="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", 0x163, 0x20000080, &(0x7f0000000140)={0x1a, 0xfffe, 0x98d1, 0x5808, 0x80000001, 0x1}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080)={0x3, 0x200}, 0x2) fsetxattr$security_ima(r1, &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0502010000e6028c006c4d77b686004e4dedae2d1446e3167665236b53abbaa67c1926d5eb345ddded70b7c6f9ec3dd215375999f86a1a89dd25d80f4c86ebe04f96c7a2ed1b80f7e4ad15f44c7f546693ade3f3a6a53d0928d6c9a885eafa2375736129871fbb25fbf4aa388abc547418e68a1a"], 0x76, 0x2) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f0000000040)) bind$bt_l2cap(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000280)={0x6, 0x200, 0x2, 0x8}, &(0x7f00000002c0)=0x10) 07:03:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x2a00000000000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) [ 611.379791][T27898] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) [ 611.388002][T27898] FAT-fs (loop4): Filesystem has been set read-only 07:03:52 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') exit(0x0) sendfile(r0, r0, 0x0, 0x3) read(r0, &(0x7f00000000c0)=""/4096, 0x1000) 07:03:52 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) 07:03:52 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x4000000000000, 0x0) sendto$llc(r0, &(0x7f0000000300)="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", 0x163, 0x20000080, &(0x7f0000000140)={0x1a, 0xfffe, 0x98d1, 0x5808, 0x80000001, 0x1}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080)={0x3, 0x200}, 0x2) fsetxattr$security_ima(r1, &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0502010000e6028c006c4d77b686004e4dedae2d1446e3167665236b53abbaa67c1926d5eb345ddded70b7c6f9ec3dd215375999f86a1a89dd25d80f4c86ebe04f96c7a2ed1b80f7e4ad15f44c7f546693ade3f3a6a53d0928d6c9a885eafa2375736129871fbb25fbf4aa388abc547418e68a1a"], 0x76, 0x2) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f0000000040)) bind$bt_l2cap(r1, 0x0, 0x0) 07:03:52 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000080), &(0x7f0000000100)=0x6) r1 = socket(0x8, 0x3, 0x3) connect$x25(r1, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x98) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000480)={0x18d0ca8f094b32c0, 0x2, 0x0, 0x1}) 07:03:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x3000000000000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:52 executing program 4: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000009c0)={{{@in=@multicast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f0000000ac0)=0xe8) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x1, 0xa, &(0x7f00000008c0)=[{&(0x7f00000000c0)="c4ea5a0fd208891ad54303abbbb87a9555af0a58ffe5b958cee0adc2092b4d59c1012832a0a7c4105727e25dca665e1d843db7d42f0ba4bf1df07544afeaa1b358c62c3fad062cdcc25cef6436ba278c8aae7f228783f116b27328c7892458eb3c023d3deab9862f88e8a698", 0x6c, 0x1}, {&(0x7f0000000200)="8b86b8132d838cbb8d36f4dd46651a2aa92596f6a04c9d590bd513b7c95d648c1f5648efe9f2e975f3f9459352843e66ead04f7c97aba643b3b5fa00b4feecde7128d2efbd34c77e84e92c5f6d2c7e98b4f15c25f6e0cfd0f7496cdca2faf2a2d102e85375216767bf6ed8084118c590eeae45ed72128f98c8402fbb14a8c89423b1e6ba752ec7fef5ca157f5ed83b2ea6b289445ebd4c052cd3d18b32615c40aa50ddf67a3b5854971167e8f890a6aa908ad252d202cff580dfccc4076b132ebbd89aa2c754d8749471abd8a99900581eb69f89e4177e2806b6bc579c8f058a2f60150cc72599883ea393615e988ac182de747a5d", 0xf5, 0x1000}, {&(0x7f0000000140)="d8cd28d042b31f1448ffe3baacc09a08e1ef609eb78f6f4e2cfafb9a71deadcc6632a4ea2d70692dbb0c6da32d89e32b3748b991fae6d1481b89ef", 0x3b, 0x1e}, {&(0x7f0000000300)="36d7d78319fddac2c14aae6285b8270db4eac63c1bc53725", 0x18, 0x400}, {&(0x7f0000000340)="d42dfe1af390e3ee2c5a168ef11029b9ece79e4f3b34e9fe00cf630ef4a876b1887f1939095dacf82ecb0f2223f7d052f35d4147a3215546dd9f40fa14f6a1e2a67000b45cb8eea7ad080a77909ad9bd8b6e11dee98fc2e5890b7b674b714749597fdd25e31b60765dc43760653e02f0ef9bac37d3862c11f9ab7dcd92abdf4ecb48dc2f04ce39f0281b87ea145c38ea30e10a294443f61d28b70ea3e2c16798cd493ef1fed0613435bb99630b6dcf94530b47f7a5ca4918c944d8bfb51e6b4376ad5fc470aae63b243773f9a6e0ab160a32c51c1f4228cab91491ab59cf3c8310984471e31213111edb2c3e296eac9f6560c029b28a03ee576f8757103edf", 0xff, 0x2}, {&(0x7f0000000440)="2c0355c89609a830c7e09f21ca5726c9a49bb78abfa3ad475919a2dfd01442347a7d50840dc9f8c5f7f24934265cecbf57acac2db8ed934bc9c0102825c0cc8c4eb5b40a1ed8ae0553c7d8873fd1aca525cb49a8fbad4993822c32add6799d5768ca27a1d00b56fab734bc6c0f76ee244a1c8b058dcb831725bc651d63ab2c9e9cac70d2e6ac74443423ac8895e15bd89fc4238978c794653a2e646c3a5fc056abdf15b95db9346d94ba6ad0183372de9d263ba0cfc71fe408715ca8e3bb8b177621c1634530de6bbef5278e2b87ca26663dd8b43dfe2907f6b7de30cc4e5ac2d58a29529f532d3844b7e155d50ba7caee0ea959b4f966fab160be", 0xfb, 0xa00}, {&(0x7f0000000540)="76b7aef66f8f30994df3436c0ab0222fc9ad935d3749ccdcd7c5c9f62e7fe3c1085c3f423feaebfb5a04fb6718a7507192bc10fbcfcacc4e2337ae80a15b0fb27014a1ffb4864c43eaf7f19bb0319309", 0x50, 0x2}, {&(0x7f00000005c0)="a13362909352266037ecbd734d6f14d1fc11ae8755689a8aafc4b3ccab3fb4d5a518d39a1d79e89a28b0c354691919a76506cc82e5794bb0ccfaa21626db93ad3df19a4a804dcd2e0108616e22c59c764a23ee833c34ea9020a92b7bb7ee3a47f5fc4fd354faea7200340621d4f70d09dfb742b82970cd3f30d8dcbdba893e04bd305504178e595f9e515b61f12698e959109151e0fe4237f5811495d012011f47d4db09fe23ca42bdbf67368f056c06714e8a558500096120059523f16d1ceef40af8d97e9141241bd5aa58aa676a0fe9fc19ee93b0", 0xd6, 0x2}, {&(0x7f00000006c0)="53d82f5dde6c170d86f4d38f9b0069b0602f8af500ad3b9dd811e266c2aff4c1e121da44ece524f5f178c79cb259d079a349bf2ec8fc072c4bdce604e534168cef4ee4e53e462804a6eda854a88aabbff474da3292d82a47caa7a088bcfb8c147a413e6832921a3799836a897bfff5ddff62d27ee997bf16caf5c9db4a9ce49a557372f0e87b574e63d5bb9c76a3e2b0735a49bde4219aefdf00773e844c2bde3a1570b40c55de659942b3eba51c10e06611d3e61908f5c93a17d12632b6958f5593", 0xc2, 0x4}, {&(0x7f00000007c0)="b8a0f129efa94f3ae21a52b9b2782f3ac3990adca36fa8ebad4fc1fd65007747634f92ff71531919fb4775bf305e1756457e2244dca00f8997365d43bfef79bc02e264bb531c51a3a8ad3a04a85b25b6dfa8ccf595b1ca6fdad74a016de4ff273961591e71a6635112bb27382f522ea513a8914946b607c2702697f492f335ab2e9eee6124765677db4a3ee93aae41abf75e3a10b8857a89c0c2fe6a4159cca3d95a119d5dfb419bc784295f242ecb682c8d939214041dd2d60405e17a2a113d2a2db598bee953af266f849e6fd1bfe8ee858050434e2264490062917f3e13d77a282801d8b645f7e27b77808e3a58b04a0fae8dbb", 0xf5, 0xfffffffffffffffe}], 0x800, &(0x7f0000000b00)={[{@nobh='nobh'}, {@test_dummy_encryption='test_dummy_encryption'}, {@mblk_io_submit='mblk_io_submit'}, {@acl='acl'}, {@errors_remount='errors=remount-ro'}, {@journal_checksum='journal_checksum'}], [{@subj_user={'subj_user', 0x3d, '$:selinux'}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x31, 0x37, 0x77, 0x7f, 0x35, 0x36, 0x38], 0x2d, [0x66, 0x34, 0x3b, 0x33], 0x2d, [0x7f, 0x77, 0x39, 0x77], 0x2d, [0x77, 0x33, 0x65, 0x31], 0x2d, [0x33, 0x3f, 0x39, 0x77, 0x3d, 0x77, 0x37, 0x67]}}}, {@pcr={'pcr', 0x3d, 0xe}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@euid_lt={'euid<', r0}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fsname={'fsname', 0x3d, 'hfsplus\x00'}}]}) syz_mount_image$hfsplus(&(0x7f0000000180)='hfsplus\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x4) 07:03:52 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000080), &(0x7f0000000100)=0x6) r1 = socket(0x8, 0x3, 0x3) connect$x25(r1, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x98) 07:03:52 executing program 5: setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000), 0x4) 07:03:52 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x4000000000000, 0x0) sendto$llc(r0, &(0x7f0000000300)="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", 0x163, 0x20000080, &(0x7f0000000140)={0x1a, 0xfffe, 0x98d1, 0x5808, 0x80000001, 0x1}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080)={0x3, 0x200}, 0x2) fsetxattr$security_ima(r1, &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0502010000e6028c006c4d77b686004e4dedae2d1446e3167665236b53abbaa67c1926d5eb345ddded70b7c6f9ec3dd215375999f86a1a89dd25d80f4c86ebe04f96c7a2ed1b80f7e4ad15f44c7f546693ade3f3a6a53d0928d6c9a885eafa2375736129871fbb25fbf4aa388abc547418e68a1a"], 0x76, 0x2) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f0000000040)) [ 611.613481][T27939] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 07:03:52 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000080), &(0x7f0000000100)=0x6) r1 = socket(0x8, 0x3, 0x3) connect$x25(r1, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) [ 611.670322][T27947] hfsplus: unable to find HFS+ superblock 07:03:52 executing program 5: setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000), 0x4) [ 611.719007][T27938] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) 07:03:52 executing program 4: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000009c0)={{{@in=@multicast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f0000000ac0)=0xe8) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x1, 0xa, &(0x7f00000008c0)=[{&(0x7f00000000c0)="c4ea5a0fd208891ad54303abbbb87a9555af0a58ffe5b958cee0adc2092b4d59c1012832a0a7c4105727e25dca665e1d843db7d42f0ba4bf1df07544afeaa1b358c62c3fad062cdcc25cef6436ba278c8aae7f228783f116b27328c7892458eb3c023d3deab9862f88e8a698", 0x6c, 0x1}, {&(0x7f0000000200)="8b86b8132d838cbb8d36f4dd46651a2aa92596f6a04c9d590bd513b7c95d648c1f5648efe9f2e975f3f9459352843e66ead04f7c97aba643b3b5fa00b4feecde7128d2efbd34c77e84e92c5f6d2c7e98b4f15c25f6e0cfd0f7496cdca2faf2a2d102e85375216767bf6ed8084118c590eeae45ed72128f98c8402fbb14a8c89423b1e6ba752ec7fef5ca157f5ed83b2ea6b289445ebd4c052cd3d18b32615c40aa50ddf67a3b5854971167e8f890a6aa908ad252d202cff580dfccc4076b132ebbd89aa2c754d8749471abd8a99900581eb69f89e4177e2806b6bc579c8f058a2f60150cc72599883ea393615e988ac182de747a5d", 0xf5, 0x1000}, {&(0x7f0000000140)="d8cd28d042b31f1448ffe3baacc09a08e1ef609eb78f6f4e2cfafb9a71deadcc6632a4ea2d70692dbb0c6da32d89e32b3748b991fae6d1481b89ef", 0x3b, 0x1e}, {&(0x7f0000000300)="36d7d78319fddac2c14aae6285b8270db4eac63c1bc53725", 0x18, 0x400}, {&(0x7f0000000340)="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", 0xff, 0x2}, {&(0x7f0000000440)="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", 0xfb, 0xa00}, {&(0x7f0000000540)="76b7aef66f8f30994df3436c0ab0222fc9ad935d3749ccdcd7c5c9f62e7fe3c1085c3f423feaebfb5a04fb6718a7507192bc10fbcfcacc4e2337ae80a15b0fb27014a1ffb4864c43eaf7f19bb0319309", 0x50, 0x2}, {&(0x7f00000005c0)="a13362909352266037ecbd734d6f14d1fc11ae8755689a8aafc4b3ccab3fb4d5a518d39a1d79e89a28b0c354691919a76506cc82e5794bb0ccfaa21626db93ad3df19a4a804dcd2e0108616e22c59c764a23ee833c34ea9020a92b7bb7ee3a47f5fc4fd354faea7200340621d4f70d09dfb742b82970cd3f30d8dcbdba893e04bd305504178e595f9e515b61f12698e959109151e0fe4237f5811495d012011f47d4db09fe23ca42bdbf67368f056c06714e8a558500096120059523f16d1ceef40af8d97e9141241bd5aa58aa676a0fe9fc19ee93b0", 0xd6, 0x2}, {&(0x7f00000006c0)="53d82f5dde6c170d86f4d38f9b0069b0602f8af500ad3b9dd811e266c2aff4c1e121da44ece524f5f178c79cb259d079a349bf2ec8fc072c4bdce604e534168cef4ee4e53e462804a6eda854a88aabbff474da3292d82a47caa7a088bcfb8c147a413e6832921a3799836a897bfff5ddff62d27ee997bf16caf5c9db4a9ce49a557372f0e87b574e63d5bb9c76a3e2b0735a49bde4219aefdf00773e844c2bde3a1570b40c55de659942b3eba51c10e06611d3e61908f5c93a17d12632b6958f5593", 0xc2, 0x4}, {&(0x7f00000007c0)="b8a0f129efa94f3ae21a52b9b2782f3ac3990adca36fa8ebad4fc1fd65007747634f92ff71531919fb4775bf305e1756457e2244dca00f8997365d43bfef79bc02e264bb531c51a3a8ad3a04a85b25b6dfa8ccf595b1ca6fdad74a016de4ff273961591e71a6635112bb27382f522ea513a8914946b607c2702697f492f335ab2e9eee6124765677db4a3ee93aae41abf75e3a10b8857a89c0c2fe6a4159cca3d95a119d5dfb419bc784295f242ecb682c8d939214041dd2d60405e17a2a113d2a2db598bee953af266f849e6fd1bfe8ee858050434e2264490062917f3e13d77a282801d8b645f7e27b77808e3a58b04a0fae8dbb", 0xf5, 0xfffffffffffffffe}], 0x800, &(0x7f0000000b00)={[{@nobh='nobh'}, {@test_dummy_encryption='test_dummy_encryption'}, {@mblk_io_submit='mblk_io_submit'}, {@acl='acl'}, {@errors_remount='errors=remount-ro'}, {@journal_checksum='journal_checksum'}], [{@subj_user={'subj_user', 0x3d, '$:selinux'}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x31, 0x37, 0x77, 0x7f, 0x35, 0x36, 0x38], 0x2d, [0x66, 0x34, 0x3b, 0x33], 0x2d, [0x7f, 0x77, 0x39, 0x77], 0x2d, [0x77, 0x33, 0x65, 0x31], 0x2d, [0x33, 0x3f, 0x39, 0x77, 0x3d, 0x77, 0x37, 0x67]}}}, {@pcr={'pcr', 0x3d, 0xe}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@euid_lt={'euid<', r0}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fsname={'fsname', 0x3d, 'hfsplus\x00'}}]}) syz_mount_image$hfsplus(&(0x7f0000000180)='hfsplus\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x4) [ 611.771972][T27938] FAT-fs (loop1): Filesystem has been set read-only [ 611.900221][T27961] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 611.927985][T27961] hfsplus: unable to find HFS+ superblock 07:03:53 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') dup2(r0, r0) exit(0x0) clock_gettime(0x20000, &(0x7f0000000040)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000000)={0x7}, &(0x7f00000001c0), &(0x7f0000000240)={r1, r2+10000000}, 0x8) socket$inet(0x2, 0x3, 0x16000000000000) sendfile(r0, r0, 0x0, 0x3) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000380)={0xb, @capture={0x1000, 0x1, {0x9, 0x67}, 0x100000000, 0x1}}) 07:03:53 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x3600000000000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:53 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x4000000000000, 0x0) sendto$llc(r0, &(0x7f0000000300)="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", 0x163, 0x20000080, &(0x7f0000000140)={0x1a, 0xfffe, 0x98d1, 0x5808, 0x80000001, 0x1}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080)={0x3, 0x200}, 0x2) fsetxattr$security_ima(r1, &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0502010000e6028c006c4d77b686004e4dedae2d1446e3167665236b53abbaa67c1926d5eb345ddded70b7c6f9ec3dd215375999f86a1a89dd25d80f4c86ebe04f96c7a2ed1b80f7e4ad15f44c7f546693ade3f3a6a53d0928d6c9a885eafa2375736129871fbb25fbf4aa388abc547418e68a1a"], 0x76, 0x2) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) 07:03:53 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000080), &(0x7f0000000100)=0x6) socket(0x8, 0x3, 0x3) 07:03:53 executing program 5: setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000), 0x4) 07:03:53 executing program 4: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000009c0)={{{@in=@multicast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f0000000ac0)=0xe8) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x1, 0xa, &(0x7f00000008c0)=[{&(0x7f00000000c0)="c4ea5a0fd208891ad54303abbbb87a9555af0a58ffe5b958cee0adc2092b4d59c1012832a0a7c4105727e25dca665e1d843db7d42f0ba4bf1df07544afeaa1b358c62c3fad062cdcc25cef6436ba278c8aae7f228783f116b27328c7892458eb3c023d3deab9862f88e8a698", 0x6c, 0x1}, {&(0x7f0000000200)="8b86b8132d838cbb8d36f4dd46651a2aa92596f6a04c9d590bd513b7c95d648c1f5648efe9f2e975f3f9459352843e66ead04f7c97aba643b3b5fa00b4feecde7128d2efbd34c77e84e92c5f6d2c7e98b4f15c25f6e0cfd0f7496cdca2faf2a2d102e85375216767bf6ed8084118c590eeae45ed72128f98c8402fbb14a8c89423b1e6ba752ec7fef5ca157f5ed83b2ea6b289445ebd4c052cd3d18b32615c40aa50ddf67a3b5854971167e8f890a6aa908ad252d202cff580dfccc4076b132ebbd89aa2c754d8749471abd8a99900581eb69f89e4177e2806b6bc579c8f058a2f60150cc72599883ea393615e988ac182de747a5d", 0xf5, 0x1000}, {&(0x7f0000000140)="d8cd28d042b31f1448ffe3baacc09a08e1ef609eb78f6f4e2cfafb9a71deadcc6632a4ea2d70692dbb0c6da32d89e32b3748b991fae6d1481b89ef", 0x3b, 0x1e}, {&(0x7f0000000300)="36d7d78319fddac2c14aae6285b8270db4eac63c1bc53725", 0x18, 0x400}, {&(0x7f0000000340)="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", 0xff, 0x2}, {&(0x7f0000000440)="2c0355c89609a830c7e09f21ca5726c9a49bb78abfa3ad475919a2dfd01442347a7d50840dc9f8c5f7f24934265cecbf57acac2db8ed934bc9c0102825c0cc8c4eb5b40a1ed8ae0553c7d8873fd1aca525cb49a8fbad4993822c32add6799d5768ca27a1d00b56fab734bc6c0f76ee244a1c8b058dcb831725bc651d63ab2c9e9cac70d2e6ac74443423ac8895e15bd89fc4238978c794653a2e646c3a5fc056abdf15b95db9346d94ba6ad0183372de9d263ba0cfc71fe408715ca8e3bb8b177621c1634530de6bbef5278e2b87ca26663dd8b43dfe2907f6b7de30cc4e5ac2d58a29529f532d3844b7e155d50ba7caee0ea959b4f966fab160be", 0xfb, 0xa00}, {&(0x7f0000000540)="76b7aef66f8f30994df3436c0ab0222fc9ad935d3749ccdcd7c5c9f62e7fe3c1085c3f423feaebfb5a04fb6718a7507192bc10fbcfcacc4e2337ae80a15b0fb27014a1ffb4864c43eaf7f19bb0319309", 0x50, 0x2}, {&(0x7f00000005c0)="a13362909352266037ecbd734d6f14d1fc11ae8755689a8aafc4b3ccab3fb4d5a518d39a1d79e89a28b0c354691919a76506cc82e5794bb0ccfaa21626db93ad3df19a4a804dcd2e0108616e22c59c764a23ee833c34ea9020a92b7bb7ee3a47f5fc4fd354faea7200340621d4f70d09dfb742b82970cd3f30d8dcbdba893e04bd305504178e595f9e515b61f12698e959109151e0fe4237f5811495d012011f47d4db09fe23ca42bdbf67368f056c06714e8a558500096120059523f16d1ceef40af8d97e9141241bd5aa58aa676a0fe9fc19ee93b0", 0xd6, 0x2}, {&(0x7f00000006c0)="53d82f5dde6c170d86f4d38f9b0069b0602f8af500ad3b9dd811e266c2aff4c1e121da44ece524f5f178c79cb259d079a349bf2ec8fc072c4bdce604e534168cef4ee4e53e462804a6eda854a88aabbff474da3292d82a47caa7a088bcfb8c147a413e6832921a3799836a897bfff5ddff62d27ee997bf16caf5c9db4a9ce49a557372f0e87b574e63d5bb9c76a3e2b0735a49bde4219aefdf00773e844c2bde3a1570b40c55de659942b3eba51c10e06611d3e61908f5c93a17d12632b6958f5593", 0xc2, 0x4}, {&(0x7f00000007c0)="b8a0f129efa94f3ae21a52b9b2782f3ac3990adca36fa8ebad4fc1fd65007747634f92ff71531919fb4775bf305e1756457e2244dca00f8997365d43bfef79bc02e264bb531c51a3a8ad3a04a85b25b6dfa8ccf595b1ca6fdad74a016de4ff273961591e71a6635112bb27382f522ea513a8914946b607c2702697f492f335ab2e9eee6124765677db4a3ee93aae41abf75e3a10b8857a89c0c2fe6a4159cca3d95a119d5dfb419bc784295f242ecb682c8d939214041dd2d60405e17a2a113d2a2db598bee953af266f849e6fd1bfe8ee858050434e2264490062917f3e13d77a282801d8b645f7e27b77808e3a58b04a0fae8dbb", 0xf5, 0xfffffffffffffffe}], 0x800, &(0x7f0000000b00)={[{@nobh='nobh'}, {@test_dummy_encryption='test_dummy_encryption'}, {@mblk_io_submit='mblk_io_submit'}, {@acl='acl'}, {@errors_remount='errors=remount-ro'}, {@journal_checksum='journal_checksum'}], [{@subj_user={'subj_user', 0x3d, '$:selinux'}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x31, 0x37, 0x77, 0x7f, 0x35, 0x36, 0x38], 0x2d, [0x66, 0x34, 0x3b, 0x33], 0x2d, [0x7f, 0x77, 0x39, 0x77], 0x2d, [0x77, 0x33, 0x65, 0x31], 0x2d, [0x33, 0x3f, 0x39, 0x77, 0x3d, 0x77, 0x37, 0x67]}}}, {@pcr={'pcr', 0x3d, 0xe}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@euid_lt={'euid<', r0}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fsname={'fsname', 0x3d, 'hfsplus\x00'}}]}) syz_mount_image$hfsplus(&(0x7f0000000180)='hfsplus\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x4) 07:03:53 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x4000000000000, 0x0) sendto$llc(r0, &(0x7f0000000300)="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", 0x163, 0x20000080, &(0x7f0000000140)={0x1a, 0xfffe, 0x98d1, 0x5808, 0x80000001, 0x1}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080)={0x3, 0x200}, 0x2) fsetxattr$security_ima(r1, &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0502010000e6028c006c4d77b686004e4dedae2d1446e3167665236b53abbaa67c1926d5eb345ddded70b7c6f9ec3dd215375999f86a1a89dd25d80f4c86ebe04f96c7a2ed1b80f7e4ad15f44c7f546693ade3f3a6a53d0928d6c9a885eafa2375736129871fbb25fbf4aa388abc547418e68a1a"], 0x76, 0x2) [ 612.541394][T27971] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 07:03:53 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000080), &(0x7f0000000100)=0x6) 07:03:53 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) 07:03:53 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x3c00000000000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:53 executing program 4: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000009c0)={{{@in=@multicast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f0000000ac0)=0xe8) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x1, 0xa, &(0x7f00000008c0)=[{&(0x7f00000000c0)="c4ea5a0fd208891ad54303abbbb87a9555af0a58ffe5b958cee0adc2092b4d59c1012832a0a7c4105727e25dca665e1d843db7d42f0ba4bf1df07544afeaa1b358c62c3fad062cdcc25cef6436ba278c8aae7f228783f116b27328c7892458eb3c023d3deab9862f88e8a698", 0x6c, 0x1}, {&(0x7f0000000200)="8b86b8132d838cbb8d36f4dd46651a2aa92596f6a04c9d590bd513b7c95d648c1f5648efe9f2e975f3f9459352843e66ead04f7c97aba643b3b5fa00b4feecde7128d2efbd34c77e84e92c5f6d2c7e98b4f15c25f6e0cfd0f7496cdca2faf2a2d102e85375216767bf6ed8084118c590eeae45ed72128f98c8402fbb14a8c89423b1e6ba752ec7fef5ca157f5ed83b2ea6b289445ebd4c052cd3d18b32615c40aa50ddf67a3b5854971167e8f890a6aa908ad252d202cff580dfccc4076b132ebbd89aa2c754d8749471abd8a99900581eb69f89e4177e2806b6bc579c8f058a2f60150cc72599883ea393615e988ac182de747a5d", 0xf5, 0x1000}, {&(0x7f0000000140)="d8cd28d042b31f1448ffe3baacc09a08e1ef609eb78f6f4e2cfafb9a71deadcc6632a4ea2d70692dbb0c6da32d89e32b3748b991fae6d1481b89ef", 0x3b, 0x1e}, {&(0x7f0000000300)="36d7d78319fddac2c14aae6285b8270db4eac63c1bc53725", 0x18, 0x400}, {&(0x7f0000000340)="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", 0xff, 0x2}, {&(0x7f0000000440)="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", 0xfb, 0xa00}, {&(0x7f0000000540)="76b7aef66f8f30994df3436c0ab0222fc9ad935d3749ccdcd7c5c9f62e7fe3c1085c3f423feaebfb5a04fb6718a7507192bc10fbcfcacc4e2337ae80a15b0fb27014a1ffb4864c43eaf7f19bb0319309", 0x50, 0x2}, {&(0x7f00000005c0)="a13362909352266037ecbd734d6f14d1fc11ae8755689a8aafc4b3ccab3fb4d5a518d39a1d79e89a28b0c354691919a76506cc82e5794bb0ccfaa21626db93ad3df19a4a804dcd2e0108616e22c59c764a23ee833c34ea9020a92b7bb7ee3a47f5fc4fd354faea7200340621d4f70d09dfb742b82970cd3f30d8dcbdba893e04bd305504178e595f9e515b61f12698e959109151e0fe4237f5811495d012011f47d4db09fe23ca42bdbf67368f056c06714e8a558500096120059523f16d1ceef40af8d97e9141241bd5aa58aa676a0fe9fc19ee93b0", 0xd6, 0x2}, {&(0x7f00000006c0)="53d82f5dde6c170d86f4d38f9b0069b0602f8af500ad3b9dd811e266c2aff4c1e121da44ece524f5f178c79cb259d079a349bf2ec8fc072c4bdce604e534168cef4ee4e53e462804a6eda854a88aabbff474da3292d82a47caa7a088bcfb8c147a413e6832921a3799836a897bfff5ddff62d27ee997bf16caf5c9db4a9ce49a557372f0e87b574e63d5bb9c76a3e2b0735a49bde4219aefdf00773e844c2bde3a1570b40c55de659942b3eba51c10e06611d3e61908f5c93a17d12632b6958f5593", 0xc2, 0x4}, {&(0x7f00000007c0)="b8a0f129efa94f3ae21a52b9b2782f3ac3990adca36fa8ebad4fc1fd65007747634f92ff71531919fb4775bf305e1756457e2244dca00f8997365d43bfef79bc02e264bb531c51a3a8ad3a04a85b25b6dfa8ccf595b1ca6fdad74a016de4ff273961591e71a6635112bb27382f522ea513a8914946b607c2702697f492f335ab2e9eee6124765677db4a3ee93aae41abf75e3a10b8857a89c0c2fe6a4159cca3d95a119d5dfb419bc784295f242ecb682c8d939214041dd2d60405e17a2a113d2a2db598bee953af266f849e6fd1bfe8ee858050434e2264490062917f3e13d77a282801d8b645f7e27b77808e3a58b04a0fae8dbb", 0xf5, 0xfffffffffffffffe}], 0x800, &(0x7f0000000b00)={[{@nobh='nobh'}, {@test_dummy_encryption='test_dummy_encryption'}, {@mblk_io_submit='mblk_io_submit'}, {@acl='acl'}, {@errors_remount='errors=remount-ro'}, {@journal_checksum='journal_checksum'}], [{@subj_user={'subj_user', 0x3d, '$:selinux'}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x31, 0x37, 0x77, 0x7f, 0x35, 0x36, 0x38], 0x2d, [0x66, 0x34, 0x3b, 0x33], 0x2d, [0x7f, 0x77, 0x39, 0x77], 0x2d, [0x77, 0x33, 0x65, 0x31], 0x2d, [0x33, 0x3f, 0x39, 0x77, 0x3d, 0x77, 0x37, 0x67]}}}, {@pcr={'pcr', 0x3d, 0xe}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@euid_lt={'euid<', r0}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fsname={'fsname', 0x3d, 'hfsplus\x00'}}]}) syz_mount_image$hfsplus(&(0x7f0000000180)='hfsplus\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 07:03:53 executing program 2: getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), &(0x7f0000000100)=0x6) [ 612.808159][T27995] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 612.899415][T27996] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 612.901383][T28001] hfsplus: unable to find HFS+ superblock [ 612.914595][T27996] FAT-fs (loop1): Filesystem has been set read-only 07:03:54 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') exit(0x100000000) socket$unix(0x1, 0x5, 0x0) sendfile(r0, r0, 0x0, 0x997) 07:03:54 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) 07:03:54 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x4000000000000, 0x0) sendto$llc(r0, &(0x7f0000000300)="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", 0x163, 0x20000080, &(0x7f0000000140)={0x1a, 0xfffe, 0x98d1, 0x5808, 0x80000001, 0x1}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080)={0x3, 0x200}, 0x2) 07:03:54 executing program 2: getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), &(0x7f0000000100)=0x6) 07:03:54 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x3f00000000000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:54 executing program 4: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000009c0)={{{@in=@multicast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f0000000ac0)=0xe8) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x1, 0xa, &(0x7f00000008c0)=[{&(0x7f00000000c0)="c4ea5a0fd208891ad54303abbbb87a9555af0a58ffe5b958cee0adc2092b4d59c1012832a0a7c4105727e25dca665e1d843db7d42f0ba4bf1df07544afeaa1b358c62c3fad062cdcc25cef6436ba278c8aae7f228783f116b27328c7892458eb3c023d3deab9862f88e8a698", 0x6c, 0x1}, {&(0x7f0000000200)="8b86b8132d838cbb8d36f4dd46651a2aa92596f6a04c9d590bd513b7c95d648c1f5648efe9f2e975f3f9459352843e66ead04f7c97aba643b3b5fa00b4feecde7128d2efbd34c77e84e92c5f6d2c7e98b4f15c25f6e0cfd0f7496cdca2faf2a2d102e85375216767bf6ed8084118c590eeae45ed72128f98c8402fbb14a8c89423b1e6ba752ec7fef5ca157f5ed83b2ea6b289445ebd4c052cd3d18b32615c40aa50ddf67a3b5854971167e8f890a6aa908ad252d202cff580dfccc4076b132ebbd89aa2c754d8749471abd8a99900581eb69f89e4177e2806b6bc579c8f058a2f60150cc72599883ea393615e988ac182de747a5d", 0xf5, 0x1000}, {&(0x7f0000000140)="d8cd28d042b31f1448ffe3baacc09a08e1ef609eb78f6f4e2cfafb9a71deadcc6632a4ea2d70692dbb0c6da32d89e32b3748b991fae6d1481b89ef", 0x3b, 0x1e}, {&(0x7f0000000300)="36d7d78319fddac2c14aae6285b8270db4eac63c1bc53725", 0x18, 0x400}, {&(0x7f0000000340)="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", 0xff, 0x2}, {&(0x7f0000000440)="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", 0xfb, 0xa00}, {&(0x7f0000000540)="76b7aef66f8f30994df3436c0ab0222fc9ad935d3749ccdcd7c5c9f62e7fe3c1085c3f423feaebfb5a04fb6718a7507192bc10fbcfcacc4e2337ae80a15b0fb27014a1ffb4864c43eaf7f19bb0319309", 0x50, 0x2}, {&(0x7f00000005c0)="a13362909352266037ecbd734d6f14d1fc11ae8755689a8aafc4b3ccab3fb4d5a518d39a1d79e89a28b0c354691919a76506cc82e5794bb0ccfaa21626db93ad3df19a4a804dcd2e0108616e22c59c764a23ee833c34ea9020a92b7bb7ee3a47f5fc4fd354faea7200340621d4f70d09dfb742b82970cd3f30d8dcbdba893e04bd305504178e595f9e515b61f12698e959109151e0fe4237f5811495d012011f47d4db09fe23ca42bdbf67368f056c06714e8a558500096120059523f16d1ceef40af8d97e9141241bd5aa58aa676a0fe9fc19ee93b0", 0xd6, 0x2}, {&(0x7f00000006c0)="53d82f5dde6c170d86f4d38f9b0069b0602f8af500ad3b9dd811e266c2aff4c1e121da44ece524f5f178c79cb259d079a349bf2ec8fc072c4bdce604e534168cef4ee4e53e462804a6eda854a88aabbff474da3292d82a47caa7a088bcfb8c147a413e6832921a3799836a897bfff5ddff62d27ee997bf16caf5c9db4a9ce49a557372f0e87b574e63d5bb9c76a3e2b0735a49bde4219aefdf00773e844c2bde3a1570b40c55de659942b3eba51c10e06611d3e61908f5c93a17d12632b6958f5593", 0xc2, 0x4}, {&(0x7f00000007c0)="b8a0f129efa94f3ae21a52b9b2782f3ac3990adca36fa8ebad4fc1fd65007747634f92ff71531919fb4775bf305e1756457e2244dca00f8997365d43bfef79bc02e264bb531c51a3a8ad3a04a85b25b6dfa8ccf595b1ca6fdad74a016de4ff273961591e71a6635112bb27382f522ea513a8914946b607c2702697f492f335ab2e9eee6124765677db4a3ee93aae41abf75e3a10b8857a89c0c2fe6a4159cca3d95a119d5dfb419bc784295f242ecb682c8d939214041dd2d60405e17a2a113d2a2db598bee953af266f849e6fd1bfe8ee858050434e2264490062917f3e13d77a282801d8b645f7e27b77808e3a58b04a0fae8dbb", 0xf5, 0xfffffffffffffffe}], 0x800, &(0x7f0000000b00)={[{@nobh='nobh'}, {@test_dummy_encryption='test_dummy_encryption'}, {@mblk_io_submit='mblk_io_submit'}, {@acl='acl'}, {@errors_remount='errors=remount-ro'}, {@journal_checksum='journal_checksum'}], [{@subj_user={'subj_user', 0x3d, '$:selinux'}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x31, 0x37, 0x77, 0x7f, 0x35, 0x36, 0x38], 0x2d, [0x66, 0x34, 0x3b, 0x33], 0x2d, [0x7f, 0x77, 0x39, 0x77], 0x2d, [0x77, 0x33, 0x65, 0x31], 0x2d, [0x33, 0x3f, 0x39, 0x77, 0x3d, 0x77, 0x37, 0x67]}}}, {@pcr={'pcr', 0x3d, 0xe}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@euid_lt={'euid<', r0}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fsname={'fsname', 0x3d, 'hfsplus\x00'}}]}) 07:03:54 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) 07:03:54 executing program 2: getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), &(0x7f0000000100)=0x6) 07:03:54 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x4000000000000, 0x0) sendto$llc(r0, &(0x7f0000000300)="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", 0x163, 0x20000080, &(0x7f0000000140)={0x1a, 0xfffe, 0x98d1, 0x5808, 0x80000001, 0x1}, 0x10) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000080)={0x3, 0x200}, 0x2) [ 613.606452][T28020] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 07:03:54 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x1, 0xa, &(0x7f00000008c0)=[{&(0x7f00000000c0)="c4ea5a0fd208891ad54303abbbb87a9555af0a58ffe5b958cee0adc2092b4d59c1012832a0a7c4105727e25dca665e1d843db7d42f0ba4bf1df07544afeaa1b358c62c3fad062cdcc25cef6436ba278c8aae7f228783f116b27328c7892458eb3c023d3deab9862f88e8a698", 0x6c, 0x1}, {&(0x7f0000000200)="8b86b8132d838cbb8d36f4dd46651a2aa92596f6a04c9d590bd513b7c95d648c1f5648efe9f2e975f3f9459352843e66ead04f7c97aba643b3b5fa00b4feecde7128d2efbd34c77e84e92c5f6d2c7e98b4f15c25f6e0cfd0f7496cdca2faf2a2d102e85375216767bf6ed8084118c590eeae45ed72128f98c8402fbb14a8c89423b1e6ba752ec7fef5ca157f5ed83b2ea6b289445ebd4c052cd3d18b32615c40aa50ddf67a3b5854971167e8f890a6aa908ad252d202cff580dfccc4076b132ebbd89aa2c754d8749471abd8a99900581eb69f89e4177e2806b6bc579c8f058a2f60150cc72599883ea393615e988ac182de747a5d", 0xf5, 0x1000}, {&(0x7f0000000140)="d8cd28d042b31f1448ffe3baacc09a08e1ef609eb78f6f4e2cfafb9a71deadcc6632a4ea2d70692dbb0c6da32d89e32b3748b991fae6d1481b89ef", 0x3b, 0x1e}, {&(0x7f0000000300)="36d7d78319fddac2c14aae6285b8270db4eac63c1bc53725", 0x18, 0x400}, {&(0x7f0000000340)="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", 0xff, 0x2}, {&(0x7f0000000440)="2c0355c89609a830c7e09f21ca5726c9a49bb78abfa3ad475919a2dfd01442347a7d50840dc9f8c5f7f24934265cecbf57acac2db8ed934bc9c0102825c0cc8c4eb5b40a1ed8ae0553c7d8873fd1aca525cb49a8fbad4993822c32add6799d5768ca27a1d00b56fab734bc6c0f76ee244a1c8b058dcb831725bc651d63ab2c9e9cac70d2e6ac74443423ac8895e15bd89fc4238978c794653a2e646c3a5fc056abdf15b95db9346d94ba6ad0183372de9d263ba0cfc71fe408715ca8e3bb8b177621c1634530de6bbef5278e2b87ca26663dd8b43dfe2907f6b7de30cc4e5ac2d58a29529f532d3844b7e155d50ba7caee0ea959b4f966fab160be", 0xfb, 0xa00}, {&(0x7f0000000540)="76b7aef66f8f30994df3436c0ab0222fc9ad935d3749ccdcd7c5c9f62e7fe3c1085c3f423feaebfb5a04fb6718a7507192bc10fbcfcacc4e2337ae80a15b0fb27014a1ffb4864c43eaf7f19bb0319309", 0x50, 0x2}, {&(0x7f00000005c0)="a13362909352266037ecbd734d6f14d1fc11ae8755689a8aafc4b3ccab3fb4d5a518d39a1d79e89a28b0c354691919a76506cc82e5794bb0ccfaa21626db93ad3df19a4a804dcd2e0108616e22c59c764a23ee833c34ea9020a92b7bb7ee3a47f5fc4fd354faea7200340621d4f70d09dfb742b82970cd3f30d8dcbdba893e04bd305504178e595f9e515b61f12698e959109151e0fe4237f5811495d012011f47d4db09fe23ca42bdbf67368f056c06714e8a558500096120059523f16d1ceef40af8d97e9141241bd5aa58aa676a0fe9fc19ee93b0", 0xd6, 0x2}, {&(0x7f00000006c0)="53d82f5dde6c170d86f4d38f9b0069b0602f8af500ad3b9dd811e266c2aff4c1e121da44ece524f5f178c79cb259d079a349bf2ec8fc072c4bdce604e534168cef4ee4e53e462804a6eda854a88aabbff474da3292d82a47caa7a088bcfb8c147a413e6832921a3799836a897bfff5ddff62d27ee997bf16caf5c9db4a9ce49a557372f0e87b574e63d5bb9c76a3e2b0735a49bde4219aefdf00773e844c2bde3a1570b40c55de659942b3eba51c10e06611d3e61908f5c93a17d12632b6958f5593", 0xc2, 0x4}, {&(0x7f00000007c0)="b8a0f129efa94f3ae21a52b9b2782f3ac3990adca36fa8ebad4fc1fd65007747634f92ff71531919fb4775bf305e1756457e2244dca00f8997365d43bfef79bc02e264bb531c51a3a8ad3a04a85b25b6dfa8ccf595b1ca6fdad74a016de4ff273961591e71a6635112bb27382f522ea513a8914946b607c2702697f492f335ab2e9eee6124765677db4a3ee93aae41abf75e3a10b8857a89c0c2fe6a4159cca3d95a119d5dfb419bc784295f242ecb682c8d939214041dd2d60405e17a2a113d2a2db598bee953af266f849e6fd1bfe8ee858050434e2264490062917f3e13d77a282801d8b645f7e27b77808e3a58b04a0fae8dbb", 0xf5, 0xfffffffffffffffe}], 0x800, &(0x7f0000000b00)={[{@nobh='nobh'}, {@test_dummy_encryption='test_dummy_encryption'}, {@mblk_io_submit='mblk_io_submit'}, {@acl='acl'}, {@errors_remount='errors=remount-ro'}, {@journal_checksum='journal_checksum'}], [{@subj_user={'subj_user', 0x3d, '$:selinux'}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x31, 0x37, 0x77, 0x7f, 0x35, 0x36, 0x38], 0x2d, [0x66, 0x34, 0x3b, 0x33], 0x2d, [0x7f, 0x77, 0x39, 0x77], 0x2d, [0x77, 0x33, 0x65, 0x31], 0x2d, [0x33, 0x3f, 0x39, 0x77, 0x3d, 0x77, 0x37, 0x67]}}}, {@pcr={'pcr', 0x3d, 0xe}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@euid_lt={'euid<'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fsname={'fsname', 0x3d, 'hfsplus\x00'}}]}) 07:03:54 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000080), &(0x7f0000000100)=0x6) [ 613.701190][T28015] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 613.722497][T28015] FAT-fs (loop1): Filesystem has been set read-only 07:03:54 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x4000000000000, 0x0) sendto$llc(r0, &(0x7f0000000300)="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", 0x163, 0x20000080, &(0x7f0000000140)={0x1a, 0xfffe, 0x98d1, 0x5808, 0x80000001, 0x1}, 0x10) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000080)={0x3, 0x200}, 0x2) [ 613.831617][T28036] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 07:03:55 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x8, 0x800) get_thread_area(&(0x7f0000000080)={0xf42, 0x0, 0x400, 0xfffffffffffffff9, 0x3, 0x6, 0xfffffffffffffffa, 0x1, 0x3, 0x26cfc9eb}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2010}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x800, 0x70bd29, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x810) getsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000000400), &(0x7f0000000440)=0x4) recvfrom$llc(r0, &(0x7f0000000280)=""/247, 0xf7, 0x100, &(0x7f0000000380)={0x1a, 0x118, 0xfffffffffffffff8, 0x9, 0x6, 0x81}, 0x10) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="01040600010005001b00ffff00b3811400009765c193fedb55e0fff7000000040000000000000004dd8e5e8ee410fc2a5e8d3f09df5d5e2e79d5aa9a177f020a951be12319681ff2d18ee6babb1abbd02b103da5220c40937937b2a2e53c352ef22cff0cdfbfb41de86c010eb7098e6508d79ed2186e43cf9ae96e4844597f2a1aa8f85c5d388bd51def886e1725341f35018dd2cad6bde9f18cade853812db1f0070a391e87614597007385d0bee7f69ca01e74bdb7"], 0xbd) exit(0x385) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f0000000040)={0x3, 0x800, 0x1}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) 07:03:55 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000), 0x4) 07:03:55 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x4000000000000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:55 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000080), &(0x7f0000000100)=0x6) 07:03:55 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x4000000000000, 0x0) sendto$llc(r0, &(0x7f0000000300)="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", 0x163, 0x20000080, &(0x7f0000000140)={0x1a, 0xfffe, 0x98d1, 0x5808, 0x80000001, 0x1}, 0x10) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000080)={0x3, 0x200}, 0x2) 07:03:55 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x1, 0xa, &(0x7f00000008c0)=[{&(0x7f00000000c0)="c4ea5a0fd208891ad54303abbbb87a9555af0a58ffe5b958cee0adc2092b4d59c1012832a0a7c4105727e25dca665e1d843db7d42f0ba4bf1df07544afeaa1b358c62c3fad062cdcc25cef6436ba278c8aae7f228783f116b27328c7892458eb3c023d3deab9862f88e8a698", 0x6c, 0x1}, {&(0x7f0000000200)="8b86b8132d838cbb8d36f4dd46651a2aa92596f6a04c9d590bd513b7c95d648c1f5648efe9f2e975f3f9459352843e66ead04f7c97aba643b3b5fa00b4feecde7128d2efbd34c77e84e92c5f6d2c7e98b4f15c25f6e0cfd0f7496cdca2faf2a2d102e85375216767bf6ed8084118c590eeae45ed72128f98c8402fbb14a8c89423b1e6ba752ec7fef5ca157f5ed83b2ea6b289445ebd4c052cd3d18b32615c40aa50ddf67a3b5854971167e8f890a6aa908ad252d202cff580dfccc4076b132ebbd89aa2c754d8749471abd8a99900581eb69f89e4177e2806b6bc579c8f058a2f60150cc72599883ea393615e988ac182de747a5d", 0xf5, 0x1000}, {&(0x7f0000000140)="d8cd28d042b31f1448ffe3baacc09a08e1ef609eb78f6f4e2cfafb9a71deadcc6632a4ea2d70692dbb0c6da32d89e32b3748b991fae6d1481b89ef", 0x3b, 0x1e}, {&(0x7f0000000300)="36d7d78319fddac2c14aae6285b8270db4eac63c1bc53725", 0x18, 0x400}, {&(0x7f0000000340)="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", 0xff, 0x2}, {&(0x7f0000000440)="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", 0xfb, 0xa00}, {&(0x7f0000000540)="76b7aef66f8f30994df3436c0ab0222fc9ad935d3749ccdcd7c5c9f62e7fe3c1085c3f423feaebfb5a04fb6718a7507192bc10fbcfcacc4e2337ae80a15b0fb27014a1ffb4864c43eaf7f19bb0319309", 0x50, 0x2}, {&(0x7f00000005c0)="a13362909352266037ecbd734d6f14d1fc11ae8755689a8aafc4b3ccab3fb4d5a518d39a1d79e89a28b0c354691919a76506cc82e5794bb0ccfaa21626db93ad3df19a4a804dcd2e0108616e22c59c764a23ee833c34ea9020a92b7bb7ee3a47f5fc4fd354faea7200340621d4f70d09dfb742b82970cd3f30d8dcbdba893e04bd305504178e595f9e515b61f12698e959109151e0fe4237f5811495d012011f47d4db09fe23ca42bdbf67368f056c06714e8a558500096120059523f16d1ceef40af8d97e9141241bd5aa58aa676a0fe9fc19ee93b0", 0xd6, 0x2}, {&(0x7f00000006c0)="53d82f5dde6c170d86f4d38f9b0069b0602f8af500ad3b9dd811e266c2aff4c1e121da44ece524f5f178c79cb259d079a349bf2ec8fc072c4bdce604e534168cef4ee4e53e462804a6eda854a88aabbff474da3292d82a47caa7a088bcfb8c147a413e6832921a3799836a897bfff5ddff62d27ee997bf16caf5c9db4a9ce49a557372f0e87b574e63d5bb9c76a3e2b0735a49bde4219aefdf00773e844c2bde3a1570b40c55de659942b3eba51c10e06611d3e61908f5c93a17d12632b6958f5593", 0xc2, 0x4}, {&(0x7f00000007c0)="b8a0f129efa94f3ae21a52b9b2782f3ac3990adca36fa8ebad4fc1fd65007747634f92ff71531919fb4775bf305e1756457e2244dca00f8997365d43bfef79bc02e264bb531c51a3a8ad3a04a85b25b6dfa8ccf595b1ca6fdad74a016de4ff273961591e71a6635112bb27382f522ea513a8914946b607c2702697f492f335ab2e9eee6124765677db4a3ee93aae41abf75e3a10b8857a89c0c2fe6a4159cca3d95a119d5dfb419bc784295f242ecb682c8d939214041dd2d60405e17a2a113d2a2db598bee953af266f849e6fd1bfe8ee858050434e2264490062917f3e13d77a282801d8b645f7e27b77808e3a58b04a0fae8dbb", 0xf5, 0xfffffffffffffffe}], 0x800, &(0x7f0000000b00)={[{@nobh='nobh'}, {@test_dummy_encryption='test_dummy_encryption'}, {@mblk_io_submit='mblk_io_submit'}, {@acl='acl'}, {@errors_remount='errors=remount-ro'}, {@journal_checksum='journal_checksum'}], [{@subj_user={'subj_user', 0x3d, '$:selinux'}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x31, 0x37, 0x77, 0x7f, 0x35, 0x36, 0x38], 0x2d, [0x66, 0x34, 0x3b, 0x33], 0x2d, [0x7f, 0x77, 0x39, 0x77], 0x2d, [0x77, 0x33, 0x65, 0x31], 0x2d, [0x33, 0x3f, 0x39, 0x77, 0x3d, 0x77, 0x37, 0x67]}}}, {@pcr={'pcr', 0x3d, 0xe}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@euid_lt={'euid<'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fsname={'fsname', 0x3d, 'hfsplus\x00'}}]}) 07:03:55 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000080), &(0x7f0000000100)=0x6) 07:03:55 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000), 0x4) 07:03:55 executing program 3: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x4000000000000, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080)={0x3, 0x200}, 0x2) 07:03:55 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x1, 0xa, &(0x7f00000008c0)=[{&(0x7f00000000c0)="c4ea5a0fd208891ad54303abbbb87a9555af0a58ffe5b958cee0adc2092b4d59c1012832a0a7c4105727e25dca665e1d843db7d42f0ba4bf1df07544afeaa1b358c62c3fad062cdcc25cef6436ba278c8aae7f228783f116b27328c7892458eb3c023d3deab9862f88e8a698", 0x6c, 0x1}, {&(0x7f0000000200)="8b86b8132d838cbb8d36f4dd46651a2aa92596f6a04c9d590bd513b7c95d648c1f5648efe9f2e975f3f9459352843e66ead04f7c97aba643b3b5fa00b4feecde7128d2efbd34c77e84e92c5f6d2c7e98b4f15c25f6e0cfd0f7496cdca2faf2a2d102e85375216767bf6ed8084118c590eeae45ed72128f98c8402fbb14a8c89423b1e6ba752ec7fef5ca157f5ed83b2ea6b289445ebd4c052cd3d18b32615c40aa50ddf67a3b5854971167e8f890a6aa908ad252d202cff580dfccc4076b132ebbd89aa2c754d8749471abd8a99900581eb69f89e4177e2806b6bc579c8f058a2f60150cc72599883ea393615e988ac182de747a5d", 0xf5, 0x1000}, {&(0x7f0000000140)="d8cd28d042b31f1448ffe3baacc09a08e1ef609eb78f6f4e2cfafb9a71deadcc6632a4ea2d70692dbb0c6da32d89e32b3748b991fae6d1481b89ef", 0x3b, 0x1e}, {&(0x7f0000000300)="36d7d78319fddac2c14aae6285b8270db4eac63c1bc53725", 0x18, 0x400}, {&(0x7f0000000340)="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", 0xff, 0x2}, {&(0x7f0000000440)="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", 0xfb, 0xa00}, {&(0x7f0000000540)="76b7aef66f8f30994df3436c0ab0222fc9ad935d3749ccdcd7c5c9f62e7fe3c1085c3f423feaebfb5a04fb6718a7507192bc10fbcfcacc4e2337ae80a15b0fb27014a1ffb4864c43eaf7f19bb0319309", 0x50, 0x2}, {&(0x7f00000005c0)="a13362909352266037ecbd734d6f14d1fc11ae8755689a8aafc4b3ccab3fb4d5a518d39a1d79e89a28b0c354691919a76506cc82e5794bb0ccfaa21626db93ad3df19a4a804dcd2e0108616e22c59c764a23ee833c34ea9020a92b7bb7ee3a47f5fc4fd354faea7200340621d4f70d09dfb742b82970cd3f30d8dcbdba893e04bd305504178e595f9e515b61f12698e959109151e0fe4237f5811495d012011f47d4db09fe23ca42bdbf67368f056c06714e8a558500096120059523f16d1ceef40af8d97e9141241bd5aa58aa676a0fe9fc19ee93b0", 0xd6, 0x2}, {&(0x7f00000006c0)="53d82f5dde6c170d86f4d38f9b0069b0602f8af500ad3b9dd811e266c2aff4c1e121da44ece524f5f178c79cb259d079a349bf2ec8fc072c4bdce604e534168cef4ee4e53e462804a6eda854a88aabbff474da3292d82a47caa7a088bcfb8c147a413e6832921a3799836a897bfff5ddff62d27ee997bf16caf5c9db4a9ce49a557372f0e87b574e63d5bb9c76a3e2b0735a49bde4219aefdf00773e844c2bde3a1570b40c55de659942b3eba51c10e06611d3e61908f5c93a17d12632b6958f5593", 0xc2, 0x4}, {&(0x7f00000007c0)="b8a0f129efa94f3ae21a52b9b2782f3ac3990adca36fa8ebad4fc1fd65007747634f92ff71531919fb4775bf305e1756457e2244dca00f8997365d43bfef79bc02e264bb531c51a3a8ad3a04a85b25b6dfa8ccf595b1ca6fdad74a016de4ff273961591e71a6635112bb27382f522ea513a8914946b607c2702697f492f335ab2e9eee6124765677db4a3ee93aae41abf75e3a10b8857a89c0c2fe6a4159cca3d95a119d5dfb419bc784295f242ecb682c8d939214041dd2d60405e17a2a113d2a2db598bee953af266f849e6fd1bfe8ee858050434e2264490062917f3e13d77a282801d8b645f7e27b77808e3a58b04a0fae8dbb", 0xf5, 0xfffffffffffffffe}], 0x800, &(0x7f0000000b00)={[{@nobh='nobh'}, {@test_dummy_encryption='test_dummy_encryption'}, {@mblk_io_submit='mblk_io_submit'}, {@acl='acl'}, {@errors_remount='errors=remount-ro'}, {@journal_checksum='journal_checksum'}], [{@subj_user={'subj_user', 0x3d, '$:selinux'}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x31, 0x37, 0x77, 0x7f, 0x35, 0x36, 0x38], 0x2d, [0x66, 0x34, 0x3b, 0x33], 0x2d, [0x7f, 0x77, 0x39, 0x77], 0x2d, [0x77, 0x33, 0x65, 0x31], 0x2d, [0x33, 0x3f, 0x39, 0x77, 0x3d, 0x77, 0x37, 0x67]}}}, {@pcr={'pcr', 0x3d, 0xe}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@euid_lt={'euid<'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fsname={'fsname', 0x3d, 'hfsplus\x00'}}]}) 07:03:55 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000), 0x4) 07:03:55 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), &(0x7f0000000100)=0x6) 07:03:56 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') exit(0x0) sendfile(r0, r0, 0x0, 0x3) 07:03:56 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x4200000000000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:56 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080)={0x3, 0x200}, 0x2) 07:03:56 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) 07:03:56 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), &(0x7f0000000100)=0x6) 07:03:56 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x1, 0xa, &(0x7f00000008c0)=[{&(0x7f00000000c0)="c4ea5a0fd208891ad54303abbbb87a9555af0a58ffe5b958cee0adc2092b4d59c1012832a0a7c4105727e25dca665e1d843db7d42f0ba4bf1df07544afeaa1b358c62c3fad062cdcc25cef6436ba278c8aae7f228783f116b27328c7892458eb3c023d3deab9862f88e8a698", 0x6c, 0x1}, {&(0x7f0000000200)="8b86b8132d838cbb8d36f4dd46651a2aa92596f6a04c9d590bd513b7c95d648c1f5648efe9f2e975f3f9459352843e66ead04f7c97aba643b3b5fa00b4feecde7128d2efbd34c77e84e92c5f6d2c7e98b4f15c25f6e0cfd0f7496cdca2faf2a2d102e85375216767bf6ed8084118c590eeae45ed72128f98c8402fbb14a8c89423b1e6ba752ec7fef5ca157f5ed83b2ea6b289445ebd4c052cd3d18b32615c40aa50ddf67a3b5854971167e8f890a6aa908ad252d202cff580dfccc4076b132ebbd89aa2c754d8749471abd8a99900581eb69f89e4177e2806b6bc579c8f058a2f60150cc72599883ea393615e988ac182de747a5d", 0xf5, 0x1000}, {&(0x7f0000000140)="d8cd28d042b31f1448ffe3baacc09a08e1ef609eb78f6f4e2cfafb9a71deadcc6632a4ea2d70692dbb0c6da32d89e32b3748b991fae6d1481b89ef", 0x3b, 0x1e}, {&(0x7f0000000300)="36d7d78319fddac2c14aae6285b8270db4eac63c1bc53725", 0x18, 0x400}, {&(0x7f0000000340)="d42dfe1af390e3ee2c5a168ef11029b9ece79e4f3b34e9fe00cf630ef4a876b1887f1939095dacf82ecb0f2223f7d052f35d4147a3215546dd9f40fa14f6a1e2a67000b45cb8eea7ad080a77909ad9bd8b6e11dee98fc2e5890b7b674b714749597fdd25e31b60765dc43760653e02f0ef9bac37d3862c11f9ab7dcd92abdf4ecb48dc2f04ce39f0281b87ea145c38ea30e10a294443f61d28b70ea3e2c16798cd493ef1fed0613435bb99630b6dcf94530b47f7a5ca4918c944d8bfb51e6b4376ad5fc470aae63b243773f9a6e0ab160a32c51c1f4228cab91491ab59cf3c8310984471e31213111edb2c3e296eac9f6560c029b28a03ee576f8757103edf", 0xff, 0x2}, {&(0x7f0000000440)="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", 0xfb, 0xa00}, {&(0x7f0000000540)="76b7aef66f8f30994df3436c0ab0222fc9ad935d3749ccdcd7c5c9f62e7fe3c1085c3f423feaebfb5a04fb6718a7507192bc10fbcfcacc4e2337ae80a15b0fb27014a1ffb4864c43eaf7f19bb0319309", 0x50, 0x2}, {&(0x7f00000005c0)="a13362909352266037ecbd734d6f14d1fc11ae8755689a8aafc4b3ccab3fb4d5a518d39a1d79e89a28b0c354691919a76506cc82e5794bb0ccfaa21626db93ad3df19a4a804dcd2e0108616e22c59c764a23ee833c34ea9020a92b7bb7ee3a47f5fc4fd354faea7200340621d4f70d09dfb742b82970cd3f30d8dcbdba893e04bd305504178e595f9e515b61f12698e959109151e0fe4237f5811495d012011f47d4db09fe23ca42bdbf67368f056c06714e8a558500096120059523f16d1ceef40af8d97e9141241bd5aa58aa676a0fe9fc19ee93b0", 0xd6, 0x2}, {&(0x7f00000006c0)="53d82f5dde6c170d86f4d38f9b0069b0602f8af500ad3b9dd811e266c2aff4c1e121da44ece524f5f178c79cb259d079a349bf2ec8fc072c4bdce604e534168cef4ee4e53e462804a6eda854a88aabbff474da3292d82a47caa7a088bcfb8c147a413e6832921a3799836a897bfff5ddff62d27ee997bf16caf5c9db4a9ce49a557372f0e87b574e63d5bb9c76a3e2b0735a49bde4219aefdf00773e844c2bde3a1570b40c55de659942b3eba51c10e06611d3e61908f5c93a17d12632b6958f5593", 0xc2, 0x4}, {&(0x7f00000007c0)="b8a0f129efa94f3ae21a52b9b2782f3ac3990adca36fa8ebad4fc1fd65007747634f92ff71531919fb4775bf305e1756457e2244dca00f8997365d43bfef79bc02e264bb531c51a3a8ad3a04a85b25b6dfa8ccf595b1ca6fdad74a016de4ff273961591e71a6635112bb27382f522ea513a8914946b607c2702697f492f335ab2e9eee6124765677db4a3ee93aae41abf75e3a10b8857a89c0c2fe6a4159cca3d95a119d5dfb419bc784295f242ecb682c8d939214041dd2d60405e17a2a113d2a2db598bee953af266f849e6fd1bfe8ee858050434e2264490062917f3e13d77a282801d8b645f7e27b77808e3a58b04a0fae8dbb", 0xf5, 0xfffffffffffffffe}], 0x800, &(0x7f0000000b00)={[{@nobh='nobh'}, {@test_dummy_encryption='test_dummy_encryption'}, {@mblk_io_submit='mblk_io_submit'}, {@acl='acl'}, {@errors_remount='errors=remount-ro'}, {@journal_checksum='journal_checksum'}], [{@subj_user={'subj_user', 0x3d, '$:selinux'}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x31, 0x37, 0x77, 0x7f, 0x35, 0x36, 0x38], 0x2d, [0x66, 0x34, 0x3b, 0x33], 0x2d, [0x7f, 0x77, 0x39, 0x77], 0x2d, [0x77, 0x33, 0x65, 0x31], 0x2d, [0x33, 0x3f, 0x39, 0x77, 0x3d, 0x77, 0x37, 0x67]}}}, {@pcr={'pcr', 0x3d, 0xe}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@euid_lt={'euid<'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fsname={'fsname', 0x3d, 'hfsplus\x00'}}]}) 07:03:56 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), &(0x7f0000000100)=0x6) 07:03:56 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x3f00000000000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:56 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080)={0x3, 0x200}, 0x2) 07:03:56 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', 0x0, 0x1, 0xa, &(0x7f00000008c0)=[{&(0x7f00000000c0)="c4ea5a0fd208891ad54303abbbb87a9555af0a58ffe5b958cee0adc2092b4d59c1012832a0a7c4105727e25dca665e1d843db7d42f0ba4bf1df07544afeaa1b358c62c3fad062cdcc25cef6436ba278c8aae7f228783f116b27328c7892458eb3c023d3deab9862f88e8a698", 0x6c, 0x1}, {&(0x7f0000000200)="8b86b8132d838cbb8d36f4dd46651a2aa92596f6a04c9d590bd513b7c95d648c1f5648efe9f2e975f3f9459352843e66ead04f7c97aba643b3b5fa00b4feecde7128d2efbd34c77e84e92c5f6d2c7e98b4f15c25f6e0cfd0f7496cdca2faf2a2d102e85375216767bf6ed8084118c590eeae45ed72128f98c8402fbb14a8c89423b1e6ba752ec7fef5ca157f5ed83b2ea6b289445ebd4c052cd3d18b32615c40aa50ddf67a3b5854971167e8f890a6aa908ad252d202cff580dfccc4076b132ebbd89aa2c754d8749471abd8a99900581eb69f89e4177e2806b6bc579c8f058a2f60150cc72599883ea393615e988ac182de747a5d", 0xf5, 0x1000}, {&(0x7f0000000140)="d8cd28d042b31f1448ffe3baacc09a08e1ef609eb78f6f4e2cfafb9a71deadcc6632a4ea2d70692dbb0c6da32d89e32b3748b991fae6d1481b89ef", 0x3b, 0x1e}, {&(0x7f0000000300)="36d7d78319fddac2c14aae6285b8270db4eac63c1bc53725", 0x18, 0x400}, {&(0x7f0000000340)="d42dfe1af390e3ee2c5a168ef11029b9ece79e4f3b34e9fe00cf630ef4a876b1887f1939095dacf82ecb0f2223f7d052f35d4147a3215546dd9f40fa14f6a1e2a67000b45cb8eea7ad080a77909ad9bd8b6e11dee98fc2e5890b7b674b714749597fdd25e31b60765dc43760653e02f0ef9bac37d3862c11f9ab7dcd92abdf4ecb48dc2f04ce39f0281b87ea145c38ea30e10a294443f61d28b70ea3e2c16798cd493ef1fed0613435bb99630b6dcf94530b47f7a5ca4918c944d8bfb51e6b4376ad5fc470aae63b243773f9a6e0ab160a32c51c1f4228cab91491ab59cf3c8310984471e31213111edb2c3e296eac9f6560c029b28a03ee576f8757103edf", 0xff, 0x2}, {&(0x7f0000000440)="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", 0xfb, 0xa00}, {&(0x7f0000000540)="76b7aef66f8f30994df3436c0ab0222fc9ad935d3749ccdcd7c5c9f62e7fe3c1085c3f423feaebfb5a04fb6718a7507192bc10fbcfcacc4e2337ae80a15b0fb27014a1ffb4864c43eaf7f19bb0319309", 0x50, 0x2}, {&(0x7f00000005c0)="a13362909352266037ecbd734d6f14d1fc11ae8755689a8aafc4b3ccab3fb4d5a518d39a1d79e89a28b0c354691919a76506cc82e5794bb0ccfaa21626db93ad3df19a4a804dcd2e0108616e22c59c764a23ee833c34ea9020a92b7bb7ee3a47f5fc4fd354faea7200340621d4f70d09dfb742b82970cd3f30d8dcbdba893e04bd305504178e595f9e515b61f12698e959109151e0fe4237f5811495d012011f47d4db09fe23ca42bdbf67368f056c06714e8a558500096120059523f16d1ceef40af8d97e9141241bd5aa58aa676a0fe9fc19ee93b0", 0xd6, 0x2}, {&(0x7f00000006c0)="53d82f5dde6c170d86f4d38f9b0069b0602f8af500ad3b9dd811e266c2aff4c1e121da44ece524f5f178c79cb259d079a349bf2ec8fc072c4bdce604e534168cef4ee4e53e462804a6eda854a88aabbff474da3292d82a47caa7a088bcfb8c147a413e6832921a3799836a897bfff5ddff62d27ee997bf16caf5c9db4a9ce49a557372f0e87b574e63d5bb9c76a3e2b0735a49bde4219aefdf00773e844c2bde3a1570b40c55de659942b3eba51c10e06611d3e61908f5c93a17d12632b6958f5593", 0xc2, 0x4}, {&(0x7f00000007c0)="b8a0f129efa94f3ae21a52b9b2782f3ac3990adca36fa8ebad4fc1fd65007747634f92ff71531919fb4775bf305e1756457e2244dca00f8997365d43bfef79bc02e264bb531c51a3a8ad3a04a85b25b6dfa8ccf595b1ca6fdad74a016de4ff273961591e71a6635112bb27382f522ea513a8914946b607c2702697f492f335ab2e9eee6124765677db4a3ee93aae41abf75e3a10b8857a89c0c2fe6a4159cca3d95a119d5dfb419bc784295f242ecb682c8d939214041dd2d60405e17a2a113d2a2db598bee953af266f849e6fd1bfe8ee858050434e2264490062917f3e13d77a282801d8b645f7e27b77808e3a58b04a0fae8dbb", 0xf5, 0xfffffffffffffffe}], 0x800, &(0x7f0000000b00)={[{@nobh='nobh'}, {@test_dummy_encryption='test_dummy_encryption'}, {@mblk_io_submit='mblk_io_submit'}, {@acl='acl'}, {@errors_remount='errors=remount-ro'}, {@journal_checksum='journal_checksum'}], [{@subj_user={'subj_user', 0x3d, '$:selinux'}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x31, 0x37, 0x77, 0x7f, 0x35, 0x36, 0x38], 0x2d, [0x66, 0x34, 0x3b, 0x33], 0x2d, [0x7f, 0x77, 0x39, 0x77], 0x2d, [0x77, 0x33, 0x65, 0x31], 0x2d, [0x33, 0x3f, 0x39, 0x77, 0x3d, 0x77, 0x37, 0x67]}}}, {@pcr={'pcr', 0x3d, 0xe}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@euid_lt={'euid<'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fsname={'fsname', 0x3d, 'hfsplus\x00'}}]}) 07:03:56 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000000100)) 07:03:56 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x4800000000000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) [ 615.901127][T28105] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 615.909009][T28105] FAT-fs (loop1): Filesystem has been set read-only 07:03:57 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') exit(0x0) sendfile(r0, r0, 0x0, 0x3) r1 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)="1b33cf3fd627450dd1d46168d3bd6b1d434d4fde627e7e4d7734f4bafb187769b0ab3bee84cad5432635eb1ed05e7f27cf9fb95b632114a9a367cc41d3f00324819d088dd64ae59576ba1ad53a761596c122490d92537765bb286edcda2155ec4575b4303f955cf5f9a6e98e133a632a3bde55a5d8aaedbddf35dd694fb23efb42f5d331a7538260e30776ebdfd51f672a80dcc149e9dd66ea9f3339de950a1e70160bf06be3621f95489190424105f9255a4a0a", 0xb4, 0xfffffffffffffff9) keyctl$get_keyring_id(0x0, r1, 0x8) 07:03:57 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080)={0x3, 0x200}, 0x2) 07:03:57 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000180)={0x4}) sendfile(r0, r0, 0x0, 0x3) signalfd(r0, &(0x7f0000000140)={0x16d5b361}, 0x8) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x2}, 0x28, 0x2) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @reserved}, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x101000, 0x0) recvfrom$rose(r0, &(0x7f00000001c0)=""/36, 0x24, 0x2, &(0x7f0000000200)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x40) 07:03:57 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 07:03:57 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', 0x0, 0x1, 0xa, &(0x7f00000008c0)=[{&(0x7f00000000c0)="c4ea5a0fd208891ad54303abbbb87a9555af0a58ffe5b958cee0adc2092b4d59c1012832a0a7c4105727e25dca665e1d843db7d42f0ba4bf1df07544afeaa1b358c62c3fad062cdcc25cef6436ba278c8aae7f228783f116b27328c7892458eb3c023d3deab9862f88e8a698", 0x6c, 0x1}, {&(0x7f0000000200)="8b86b8132d838cbb8d36f4dd46651a2aa92596f6a04c9d590bd513b7c95d648c1f5648efe9f2e975f3f9459352843e66ead04f7c97aba643b3b5fa00b4feecde7128d2efbd34c77e84e92c5f6d2c7e98b4f15c25f6e0cfd0f7496cdca2faf2a2d102e85375216767bf6ed8084118c590eeae45ed72128f98c8402fbb14a8c89423b1e6ba752ec7fef5ca157f5ed83b2ea6b289445ebd4c052cd3d18b32615c40aa50ddf67a3b5854971167e8f890a6aa908ad252d202cff580dfccc4076b132ebbd89aa2c754d8749471abd8a99900581eb69f89e4177e2806b6bc579c8f058a2f60150cc72599883ea393615e988ac182de747a5d", 0xf5, 0x1000}, {&(0x7f0000000140)="d8cd28d042b31f1448ffe3baacc09a08e1ef609eb78f6f4e2cfafb9a71deadcc6632a4ea2d70692dbb0c6da32d89e32b3748b991fae6d1481b89ef", 0x3b, 0x1e}, {&(0x7f0000000300)="36d7d78319fddac2c14aae6285b8270db4eac63c1bc53725", 0x18, 0x400}, {&(0x7f0000000340)="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", 0xff, 0x2}, {&(0x7f0000000440)="2c0355c89609a830c7e09f21ca5726c9a49bb78abfa3ad475919a2dfd01442347a7d50840dc9f8c5f7f24934265cecbf57acac2db8ed934bc9c0102825c0cc8c4eb5b40a1ed8ae0553c7d8873fd1aca525cb49a8fbad4993822c32add6799d5768ca27a1d00b56fab734bc6c0f76ee244a1c8b058dcb831725bc651d63ab2c9e9cac70d2e6ac74443423ac8895e15bd89fc4238978c794653a2e646c3a5fc056abdf15b95db9346d94ba6ad0183372de9d263ba0cfc71fe408715ca8e3bb8b177621c1634530de6bbef5278e2b87ca26663dd8b43dfe2907f6b7de30cc4e5ac2d58a29529f532d3844b7e155d50ba7caee0ea959b4f966fab160be", 0xfb, 0xa00}, {&(0x7f0000000540)="76b7aef66f8f30994df3436c0ab0222fc9ad935d3749ccdcd7c5c9f62e7fe3c1085c3f423feaebfb5a04fb6718a7507192bc10fbcfcacc4e2337ae80a15b0fb27014a1ffb4864c43eaf7f19bb0319309", 0x50, 0x2}, {&(0x7f00000005c0)="a13362909352266037ecbd734d6f14d1fc11ae8755689a8aafc4b3ccab3fb4d5a518d39a1d79e89a28b0c354691919a76506cc82e5794bb0ccfaa21626db93ad3df19a4a804dcd2e0108616e22c59c764a23ee833c34ea9020a92b7bb7ee3a47f5fc4fd354faea7200340621d4f70d09dfb742b82970cd3f30d8dcbdba893e04bd305504178e595f9e515b61f12698e959109151e0fe4237f5811495d012011f47d4db09fe23ca42bdbf67368f056c06714e8a558500096120059523f16d1ceef40af8d97e9141241bd5aa58aa676a0fe9fc19ee93b0", 0xd6, 0x2}, {&(0x7f00000006c0)="53d82f5dde6c170d86f4d38f9b0069b0602f8af500ad3b9dd811e266c2aff4c1e121da44ece524f5f178c79cb259d079a349bf2ec8fc072c4bdce604e534168cef4ee4e53e462804a6eda854a88aabbff474da3292d82a47caa7a088bcfb8c147a413e6832921a3799836a897bfff5ddff62d27ee997bf16caf5c9db4a9ce49a557372f0e87b574e63d5bb9c76a3e2b0735a49bde4219aefdf00773e844c2bde3a1570b40c55de659942b3eba51c10e06611d3e61908f5c93a17d12632b6958f5593", 0xc2, 0x4}, {&(0x7f00000007c0)="b8a0f129efa94f3ae21a52b9b2782f3ac3990adca36fa8ebad4fc1fd65007747634f92ff71531919fb4775bf305e1756457e2244dca00f8997365d43bfef79bc02e264bb531c51a3a8ad3a04a85b25b6dfa8ccf595b1ca6fdad74a016de4ff273961591e71a6635112bb27382f522ea513a8914946b607c2702697f492f335ab2e9eee6124765677db4a3ee93aae41abf75e3a10b8857a89c0c2fe6a4159cca3d95a119d5dfb419bc784295f242ecb682c8d939214041dd2d60405e17a2a113d2a2db598bee953af266f849e6fd1bfe8ee858050434e2264490062917f3e13d77a282801d8b645f7e27b77808e3a58b04a0fae8dbb", 0xf5, 0xfffffffffffffffe}], 0x800, &(0x7f0000000b00)={[{@nobh='nobh'}, {@test_dummy_encryption='test_dummy_encryption'}, {@mblk_io_submit='mblk_io_submit'}, {@acl='acl'}, {@errors_remount='errors=remount-ro'}, {@journal_checksum='journal_checksum'}], [{@subj_user={'subj_user', 0x3d, '$:selinux'}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x31, 0x37, 0x77, 0x7f, 0x35, 0x36, 0x38], 0x2d, [0x66, 0x34, 0x3b, 0x33], 0x2d, [0x7f, 0x77, 0x39, 0x77], 0x2d, [0x77, 0x33, 0x65, 0x31], 0x2d, [0x33, 0x3f, 0x39, 0x77, 0x3d, 0x77, 0x37, 0x67]}}}, {@pcr={'pcr', 0x3d, 0xe}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@euid_lt={'euid<'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fsname={'fsname', 0x3d, 'hfsplus\x00'}}]}) 07:03:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x4e00000000000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:57 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 07:03:57 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080)={0x3, 0x200}, 0x2) 07:03:57 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000180)={0x4}) sendfile(r0, r0, 0x0, 0x3) signalfd(r0, &(0x7f0000000140)={0x16d5b361}, 0x8) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x2}, 0x28, 0x2) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @reserved}, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x101000, 0x0) recvfrom$rose(r0, &(0x7f00000001c0)=""/36, 0x24, 0x2, &(0x7f0000000200)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x40) 07:03:57 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', 0x0, 0x1, 0xa, &(0x7f00000008c0)=[{&(0x7f00000000c0)="c4ea5a0fd208891ad54303abbbb87a9555af0a58ffe5b958cee0adc2092b4d59c1012832a0a7c4105727e25dca665e1d843db7d42f0ba4bf1df07544afeaa1b358c62c3fad062cdcc25cef6436ba278c8aae7f228783f116b27328c7892458eb3c023d3deab9862f88e8a698", 0x6c, 0x1}, {&(0x7f0000000200)="8b86b8132d838cbb8d36f4dd46651a2aa92596f6a04c9d590bd513b7c95d648c1f5648efe9f2e975f3f9459352843e66ead04f7c97aba643b3b5fa00b4feecde7128d2efbd34c77e84e92c5f6d2c7e98b4f15c25f6e0cfd0f7496cdca2faf2a2d102e85375216767bf6ed8084118c590eeae45ed72128f98c8402fbb14a8c89423b1e6ba752ec7fef5ca157f5ed83b2ea6b289445ebd4c052cd3d18b32615c40aa50ddf67a3b5854971167e8f890a6aa908ad252d202cff580dfccc4076b132ebbd89aa2c754d8749471abd8a99900581eb69f89e4177e2806b6bc579c8f058a2f60150cc72599883ea393615e988ac182de747a5d", 0xf5, 0x1000}, {&(0x7f0000000140)="d8cd28d042b31f1448ffe3baacc09a08e1ef609eb78f6f4e2cfafb9a71deadcc6632a4ea2d70692dbb0c6da32d89e32b3748b991fae6d1481b89ef", 0x3b, 0x1e}, {&(0x7f0000000300)="36d7d78319fddac2c14aae6285b8270db4eac63c1bc53725", 0x18, 0x400}, {&(0x7f0000000340)="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", 0xff, 0x2}, {&(0x7f0000000440)="2c0355c89609a830c7e09f21ca5726c9a49bb78abfa3ad475919a2dfd01442347a7d50840dc9f8c5f7f24934265cecbf57acac2db8ed934bc9c0102825c0cc8c4eb5b40a1ed8ae0553c7d8873fd1aca525cb49a8fbad4993822c32add6799d5768ca27a1d00b56fab734bc6c0f76ee244a1c8b058dcb831725bc651d63ab2c9e9cac70d2e6ac74443423ac8895e15bd89fc4238978c794653a2e646c3a5fc056abdf15b95db9346d94ba6ad0183372de9d263ba0cfc71fe408715ca8e3bb8b177621c1634530de6bbef5278e2b87ca26663dd8b43dfe2907f6b7de30cc4e5ac2d58a29529f532d3844b7e155d50ba7caee0ea959b4f966fab160be", 0xfb, 0xa00}, {&(0x7f0000000540)="76b7aef66f8f30994df3436c0ab0222fc9ad935d3749ccdcd7c5c9f62e7fe3c1085c3f423feaebfb5a04fb6718a7507192bc10fbcfcacc4e2337ae80a15b0fb27014a1ffb4864c43eaf7f19bb0319309", 0x50, 0x2}, {&(0x7f00000005c0)="a13362909352266037ecbd734d6f14d1fc11ae8755689a8aafc4b3ccab3fb4d5a518d39a1d79e89a28b0c354691919a76506cc82e5794bb0ccfaa21626db93ad3df19a4a804dcd2e0108616e22c59c764a23ee833c34ea9020a92b7bb7ee3a47f5fc4fd354faea7200340621d4f70d09dfb742b82970cd3f30d8dcbdba893e04bd305504178e595f9e515b61f12698e959109151e0fe4237f5811495d012011f47d4db09fe23ca42bdbf67368f056c06714e8a558500096120059523f16d1ceef40af8d97e9141241bd5aa58aa676a0fe9fc19ee93b0", 0xd6, 0x2}, {&(0x7f00000006c0)="53d82f5dde6c170d86f4d38f9b0069b0602f8af500ad3b9dd811e266c2aff4c1e121da44ece524f5f178c79cb259d079a349bf2ec8fc072c4bdce604e534168cef4ee4e53e462804a6eda854a88aabbff474da3292d82a47caa7a088bcfb8c147a413e6832921a3799836a897bfff5ddff62d27ee997bf16caf5c9db4a9ce49a557372f0e87b574e63d5bb9c76a3e2b0735a49bde4219aefdf00773e844c2bde3a1570b40c55de659942b3eba51c10e06611d3e61908f5c93a17d12632b6958f5593", 0xc2, 0x4}, {&(0x7f00000007c0)="b8a0f129efa94f3ae21a52b9b2782f3ac3990adca36fa8ebad4fc1fd65007747634f92ff71531919fb4775bf305e1756457e2244dca00f8997365d43bfef79bc02e264bb531c51a3a8ad3a04a85b25b6dfa8ccf595b1ca6fdad74a016de4ff273961591e71a6635112bb27382f522ea513a8914946b607c2702697f492f335ab2e9eee6124765677db4a3ee93aae41abf75e3a10b8857a89c0c2fe6a4159cca3d95a119d5dfb419bc784295f242ecb682c8d939214041dd2d60405e17a2a113d2a2db598bee953af266f849e6fd1bfe8ee858050434e2264490062917f3e13d77a282801d8b645f7e27b77808e3a58b04a0fae8dbb", 0xf5, 0xfffffffffffffffe}], 0x800, &(0x7f0000000b00)={[{@nobh='nobh'}, {@test_dummy_encryption='test_dummy_encryption'}, {@mblk_io_submit='mblk_io_submit'}, {@acl='acl'}, {@errors_remount='errors=remount-ro'}, {@journal_checksum='journal_checksum'}], [{@subj_user={'subj_user', 0x3d, '$:selinux'}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x31, 0x37, 0x77, 0x7f, 0x35, 0x36, 0x38], 0x2d, [0x66, 0x34, 0x3b, 0x33], 0x2d, [0x7f, 0x77, 0x39, 0x77], 0x2d, [0x77, 0x33, 0x65, 0x31], 0x2d, [0x33, 0x3f, 0x39, 0x77, 0x3d, 0x77, 0x37, 0x67]}}}, {@pcr={'pcr', 0x3d, 0xe}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@euid_lt={'euid<'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fsname={'fsname', 0x3d, 'hfsplus\x00'}}]}) 07:03:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x5400000000000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:57 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) [ 616.735053][T28140] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 616.754450][T28140] FAT-fs (loop1): Filesystem has been set read-only 07:03:58 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') getresuid(&(0x7f0000000300)=0x0, &(0x7f0000000340), &(0x7f0000000380)) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x2, 0x3, &(0x7f0000000280)=[{&(0x7f00000000c0)="63fcf62d56264393bc941b5a6e9e7e9ad04d641f61bd0ed688f99fa2ddf7d9ed52b619b77d5cf8", 0x27, 0x6}, {&(0x7f0000000100)="16ae48ee2e66ed5461a6c45d59c234c7f14a7883febc36c272c9d1d4d0f42085d78c9d8778a19bc4d20e7c96a5f3bbe0ae370e409bebf1670e6a3765a796b34efc31516c", 0x44, 0xfffffffffffffff7}, {&(0x7f0000000180)="886d79b7ab734f81d7f1a34fa1c3496877bb37807c661a204e47bf97668a14870ca87c5a56fccac40f60f265bde8f072838c5bf2d1757aa87617e488b052100682ca9f8a3c4f9781ea795377426ec13e06514dd9d9b95a855334c4628c3a3e40eeee7bcddb1614e3b9226b1e06293acc6827404484539186580b5b55a165fd9daaa86b43b7cf83ef9b4d7d01cd6420ffeb86e54bd4d246d8b9aeede4bee41a44176f7004408309c49177a9b6ce871dc679c0b56917f6ce2717bed88d3a81711a8411d764cc35077cc54990d140035758f1d24fa59c27af9e", 0xd8, 0x4}], 0x3000, &(0x7f00000003c0)={[{@umask={'umask', 0x3d, 0xfffffffffffffff7}}, {@codepage={'codepage', 0x3d, 'iso8859-7'}}, {@creator={'creator', 0x3d, "a5217f47"}}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@uid={'uid', 0x3d, r1}}, {@dir_umask={'dir_umask', 0x3d, 0x9}}, {@session={'session', 0x3d, 0x7}}, {@codepage={'codepage', 0x3d, 'maccyrillic'}}, {@session={'session', 0x3d, 0x200}}], [{@subj_user={'subj_user', 0x3d, '$)[system'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}]}) exit(0x0) sendfile(r0, r0, 0x0, 0x20000000000003) 07:03:58 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000080)={0x3, 0x200}, 0x2) 07:03:58 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xa, &(0x7f00000008c0)=[{&(0x7f00000000c0)="c4ea5a0fd208891ad54303abbbb87a9555af0a58ffe5b958cee0adc2092b4d59c1012832a0a7c4105727e25dca665e1d843db7d42f0ba4bf1df07544afeaa1b358c62c3fad062cdcc25cef6436ba278c8aae7f228783f116b27328c7892458eb3c023d3deab9862f88e8a698", 0x6c, 0x1}, {&(0x7f0000000200)="8b86b8132d838cbb8d36f4dd46651a2aa92596f6a04c9d590bd513b7c95d648c1f5648efe9f2e975f3f9459352843e66ead04f7c97aba643b3b5fa00b4feecde7128d2efbd34c77e84e92c5f6d2c7e98b4f15c25f6e0cfd0f7496cdca2faf2a2d102e85375216767bf6ed8084118c590eeae45ed72128f98c8402fbb14a8c89423b1e6ba752ec7fef5ca157f5ed83b2ea6b289445ebd4c052cd3d18b32615c40aa50ddf67a3b5854971167e8f890a6aa908ad252d202cff580dfccc4076b132ebbd89aa2c754d8749471abd8a99900581eb69f89e4177e2806b6bc579c8f058a2f60150cc72599883ea393615e988ac182de747a5d", 0xf5, 0x1000}, {&(0x7f0000000140)="d8cd28d042b31f1448ffe3baacc09a08e1ef609eb78f6f4e2cfafb9a71deadcc6632a4ea2d70692dbb0c6da32d89e32b3748b991fae6d1481b89ef", 0x3b, 0x1e}, {&(0x7f0000000300)="36d7d78319fddac2c14aae6285b8270db4eac63c1bc53725", 0x18, 0x400}, {&(0x7f0000000340)="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", 0xff, 0x2}, {&(0x7f0000000440)="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", 0xfb, 0xa00}, {&(0x7f0000000540)="76b7aef66f8f30994df3436c0ab0222fc9ad935d3749ccdcd7c5c9f62e7fe3c1085c3f423feaebfb5a04fb6718a7507192bc10fbcfcacc4e2337ae80a15b0fb27014a1ffb4864c43eaf7f19bb0319309", 0x50, 0x2}, {&(0x7f00000005c0)="a13362909352266037ecbd734d6f14d1fc11ae8755689a8aafc4b3ccab3fb4d5a518d39a1d79e89a28b0c354691919a76506cc82e5794bb0ccfaa21626db93ad3df19a4a804dcd2e0108616e22c59c764a23ee833c34ea9020a92b7bb7ee3a47f5fc4fd354faea7200340621d4f70d09dfb742b82970cd3f30d8dcbdba893e04bd305504178e595f9e515b61f12698e959109151e0fe4237f5811495d012011f47d4db09fe23ca42bdbf67368f056c06714e8a558500096120059523f16d1ceef40af8d97e9141241bd5aa58aa676a0fe9fc19ee93b0", 0xd6, 0x2}, {&(0x7f00000006c0)="53d82f5dde6c170d86f4d38f9b0069b0602f8af500ad3b9dd811e266c2aff4c1e121da44ece524f5f178c79cb259d079a349bf2ec8fc072c4bdce604e534168cef4ee4e53e462804a6eda854a88aabbff474da3292d82a47caa7a088bcfb8c147a413e6832921a3799836a897bfff5ddff62d27ee997bf16caf5c9db4a9ce49a557372f0e87b574e63d5bb9c76a3e2b0735a49bde4219aefdf00773e844c2bde3a1570b40c55de659942b3eba51c10e06611d3e61908f5c93a17d12632b6958f5593", 0xc2, 0x4}, {&(0x7f00000007c0)="b8a0f129efa94f3ae21a52b9b2782f3ac3990adca36fa8ebad4fc1fd65007747634f92ff71531919fb4775bf305e1756457e2244dca00f8997365d43bfef79bc02e264bb531c51a3a8ad3a04a85b25b6dfa8ccf595b1ca6fdad74a016de4ff273961591e71a6635112bb27382f522ea513a8914946b607c2702697f492f335ab2e9eee6124765677db4a3ee93aae41abf75e3a10b8857a89c0c2fe6a4159cca3d95a119d5dfb419bc784295f242ecb682c8d939214041dd2d60405e17a2a113d2a2db598bee953af266f849e6fd1bfe8ee858050434e2264490062917f3e13d77a282801d8b645f7e27b77808e3a58b04a0fae8dbb", 0xf5, 0xfffffffffffffffe}], 0x800, &(0x7f0000000b00)={[{@nobh='nobh'}, {@test_dummy_encryption='test_dummy_encryption'}, {@mblk_io_submit='mblk_io_submit'}, {@acl='acl'}, {@errors_remount='errors=remount-ro'}, {@journal_checksum='journal_checksum'}], [{@subj_user={'subj_user', 0x3d, '$:selinux'}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x31, 0x37, 0x77, 0x7f, 0x35, 0x36, 0x38], 0x2d, [0x66, 0x34, 0x3b, 0x33], 0x2d, [0x7f, 0x77, 0x39, 0x77], 0x2d, [0x77, 0x33, 0x65, 0x31], 0x2d, [0x33, 0x3f, 0x39, 0x77, 0x3d, 0x77, 0x37, 0x67]}}}, {@pcr={'pcr', 0x3d, 0xe}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@euid_lt={'euid<'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fsname={'fsname', 0x3d, 'hfsplus\x00'}}]}) 07:03:58 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000180)={0x4}) sendfile(r0, r0, 0x0, 0x3) signalfd(r0, &(0x7f0000000140)={0x16d5b361}, 0x8) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x2}, 0x28, 0x2) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @reserved}, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x101000, 0x0) recvfrom$rose(r0, &(0x7f00000001c0)=""/36, 0x24, 0x2, &(0x7f0000000200)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x40) 07:03:58 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x4800000000000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x5a00000000000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) [ 617.311178][T28151] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 07:03:58 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000080)={0x3, 0x200}, 0x2) 07:03:58 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x800, &(0x7f0000000b00)={[{@nobh='nobh'}, {@test_dummy_encryption='test_dummy_encryption'}, {@mblk_io_submit='mblk_io_submit'}, {@acl='acl'}, {@errors_remount='errors=remount-ro'}, {@journal_checksum='journal_checksum'}], [{@subj_user={'subj_user', 0x3d, '$:selinux'}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x31, 0x37, 0x77, 0x7f, 0x35, 0x36, 0x38], 0x2d, [0x66, 0x34, 0x3b, 0x33], 0x2d, [0x7f, 0x77, 0x39, 0x77], 0x2d, [0x77, 0x33, 0x65, 0x31], 0x2d, [0x33, 0x3f, 0x39, 0x77, 0x3d, 0x77, 0x37, 0x67]}}}, {@pcr={'pcr', 0x3d, 0xe}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@euid_lt={'euid<'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fsname={'fsname', 0x3d, 'hfsplus\x00'}}]}) 07:03:58 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x5400000000000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:58 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000180)={0x4}) sendfile(r0, r0, 0x0, 0x3) signalfd(r0, &(0x7f0000000140)={0x16d5b361}, 0x8) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x2}, 0x28, 0x2) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @reserved}, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x101000, 0x0) 07:03:58 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000080)={0x3, 0x200}, 0x2) 07:03:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x6000000000000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) [ 617.566739][T28171] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 07:03:59 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x10000, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000240)='sd\xec\xc7\x00s\x04\xf8Dp\xba/u\xd0\x83\xa8\xa2\xd4}{\x1a\xae\xc9\xcd\x12\xed\xae\x8a0w\r7\xb0\x00\"^:\x89\xed0\xcf\xae\xb7\x7f\x10\x99\xdcx\x7fP\x14\x9c-\xbb\xb3V\x1e\xc8\xdb\x124>\x0eI\xaf^\xb3\x1c\n\x04\"\x05\xb9\x96\xbf\x8c\xfdmS\xac\xab\x9e\xaa*[j\xbd\x16o1k\b\xff\x9dM\xb8Gc\x9a\x02&P\x7f=~\x876v\x98e\xc7*\xda\x85\xa1pC\xe0j\x00{\xa2\x96\xaf\xe3n\xb2\xdb\x8d\x83A\xc5X\x8fnarN\x1c\x16\x83MY\x9e\xb9\v\xa5;\x92\xddW\x13\xd8\xdcT\xb9\xe6\x84\xea\t=G\xc1d&\xaf\xa4]\xb1\xe8\x82\x84\x8f\xe8\x03\x9f0_\xc5L\x1b\x1f\xefW\xd7\xaa\x8f\x80\x11\xb4\xdez\xe6\x1f\xd6\x99\x1e\x12\xe4x\x87\x01\xce\xe8\x12\xb3\x16\xf7\xc4\x86\xab\xf0\x91\x12(`\xaeu') exit(0x800000092) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x4) sendfile(r3, r3, 0x0, 0x0) sendmsg$can_raw(r3, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)=@canfd={{0x3, 0x5, 0x2, 0x9794}, 0x2a, 0x2, 0x0, 0x0, "498a538ecd4cddf0d8985915d89fdd82b2ce98817ff47dba1f1f56460982cd0023a5cb01c506eef93051f4214f0f03eb13e60831b3fd71228ade7bf5ae564cf7"}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4800) 07:03:59 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000180)={0x4}) sendfile(r0, r0, 0x0, 0x3) signalfd(r0, &(0x7f0000000140)={0x16d5b361}, 0x8) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x2}, 0x28, 0x2) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @reserved}, 0x10) 07:03:59 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) 07:03:59 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={[{@nobh='nobh'}, {@test_dummy_encryption='test_dummy_encryption'}, {@mblk_io_submit='mblk_io_submit'}, {@acl='acl'}, {@errors_remount='errors=remount-ro'}, {@journal_checksum='journal_checksum'}], [{@subj_user={'subj_user', 0x3d, '$:selinux'}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x31, 0x37, 0x77, 0x7f, 0x35, 0x36, 0x38], 0x2d, [0x66, 0x34, 0x3b, 0x33], 0x2d, [0x7f, 0x77, 0x39, 0x77], 0x2d, [0x77, 0x33, 0x65, 0x31], 0x2d, [0x33, 0x3f, 0x39, 0x77, 0x3d, 0x77, 0x37, 0x67]}}}, {@pcr={'pcr', 0x3d, 0xe}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@euid_lt={'euid<'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fsname={'fsname', 0x3d, 'hfsplus\x00'}}]}) 07:03:59 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x4000000001, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x5, {0x1000, 0x0, 0x1, 0x3, 0x0, 0x100000000000}, 0x0, 0x4a08}, 0xe) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'yam0\x00', {0x2, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}}) 07:03:59 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x6600000000000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:03:59 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x4000000001, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x5, {0x1000, 0x0, 0x1, 0x3, 0x0, 0x100000000000}, 0x0, 0x4a08}, 0xe) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'yam0\x00', {0x2, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}}) 07:03:59 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') write$binfmt_elf64(r0, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x800, 0x40, 0x6, 0xffffffffffffffff, 0x3, 0x3e, 0x3ff, 0x1a1, 0x40, 0xc3, 0x6, 0x3, 0x38, 0x2, 0x3f, 0xeee2, 0x400000000000000}, [{0x4, 0x5, 0x0, 0x6, 0x3ff, 0xc60, 0x2, 0x56}, {0x2, 0x9, 0x2, 0x80000000, 0x68c6, 0x6, 0xc5, 0x80000000}], "81bf278e229d388d1bc4cca650c1b4"}, 0xbf) exit(0x7) sendfile(r0, r0, 0x0, 0x3) [ 618.270341][T28195] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 07:03:59 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000180)={0x4}) sendfile(r0, r0, 0x0, 0x3) signalfd(r0, &(0x7f0000000140)={0x16d5b361}, 0x8) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x2}, 0x28, 0x2) 07:03:59 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 07:03:59 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x4000000001, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x5, {0x1000, 0x0, 0x1, 0x3, 0x0, 0x100000000000}, 0x0, 0x4a08}, 0xe) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'yam0\x00', {0x2, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}}) 07:03:59 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x6c00000000000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) [ 618.513488][T28214] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 07:04:00 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') exit(0x0) sendfile(r0, r0, 0x0, 0x3) open_by_handle_at(r0, &(0x7f00000000c0)={0x98, 0x4, "4ad2f2c71ff4fec0f881a62e08a15dd88c33a97c2ff05893525664bba9cdd5b04430d83049c3c650647ab92ba1331afcc15cd06b849b8deca8300aebf73aeb469f96a1cfcef6a007abca5b91c4aa4d236b1d178dc30a030998c6c61aa7abd447fa6ebaf1f7968d363f4ec733491c7964c7608b60b5c5a136ce502b6121ba1fbc4fd790a1091803fb47cebb96a6737e24"}, 0x84901) 07:04:00 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000180)={0x4}) sendfile(r0, r0, 0x0, 0x3) signalfd(r0, &(0x7f0000000140)={0x16d5b361}, 0x8) 07:04:00 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x4000000001, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x5, {0x1000, 0x0, 0x1, 0x3, 0x0, 0x100000000000}, 0x0, 0x4a08}, 0xe) 07:04:00 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]) r3 = gettid() r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r5 = dup(r1) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000340)=r5) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) write$P9_RLOCK(r4, &(0x7f0000000440)={0x8, 0x35, 0x2, 0x4}, 0x8) socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000880)) r8 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x7f) perf_event_open(&(0x7f00000004c0)={0x3, 0x70, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x4, 0x40000, 0x8, 0x7fff, 0x2, 0x8db0, 0x0, 0xb42, 0x2, 0x9, 0xe0, 0x3, 0xa95, 0x200, 0xffffffff, 0x3, 0x84da, 0x4, 0xa7, 0x1, 0xffff, 0x3, 0x3, 0x80000000, 0xffffffffffffff81, 0x3f, 0x8, 0x40, 0x4, 0x5, 0x80, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x7fffffff, 0xb4}, 0x9, 0xc189, 0x100000000, 0x5, 0x0, 0xffffffff, 0x5}, r3, 0x9, r0, 0x8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$BLKGETSIZE64(r10, 0x80081272, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x1d, &(0x7f0000000300)={0x4, 0x4, 0x8000, 0x4, 0x10001}, 0x14) ioctl$TUNSETIFINDEX(r9, 0x400454da, &(0x7f0000000040)=r11) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) syz_mount_image$hfsplus(&(0x7f0000000180)='hfsplus\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 07:04:00 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x7200000000000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:04:00 executing program 3: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000040)) r1 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x800005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000300)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') sendfile(r5, r5, 0x0, 0x3) 07:04:00 executing program 2: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x5, {0x1000, 0x0, 0x1, 0x3, 0x0, 0x100000000000}, 0x0, 0x4a08}, 0xe) 07:04:00 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000180)={0x4}) sendfile(r0, r0, 0x0, 0x3) [ 619.297708][T28232] hfsplus: unable to find HFS+ superblock [ 619.310919][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 619.316765][ C1] protocol 88fb is buggy, dev hsr_slave_1 07:04:00 executing program 2: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x5, {0x1000, 0x0, 0x1, 0x3, 0x0, 0x100000000000}, 0x0, 0x4a08}, 0xe) 07:04:00 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x7800000000000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:04:00 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') sendfile(r0, r0, 0x0, 0x3) 07:04:00 executing program 2: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x5, {0x1000, 0x0, 0x1, 0x3, 0x0, 0x100000000000}, 0x0, 0x4a08}, 0xe) [ 619.700249][T28252] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 619.738736][T28252] FAT-fs (loop1): Filesystem has been set read-only 07:04:01 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) exit(0x0) sendfile(r0, r0, 0x0, 0x3) 07:04:01 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="800000000000000007000000000000000100000000000000050000000000000003000000000000000509ff0100000000000000000000000000000000000000000000000900055eccb76a1b64d4574afe0000000000000000000004000000da2ed9428988bcdf43001f3de2035d0010000000000000000309000600000000000000000000000000000000010000000bbbcb056f0100000082ffffffffffffff090000000000000000097d58030300000000000000000000000000000000000000000000000000000100dc00000000000000010000000000000000000000000000d01e006b022f67706943000000100000000000002000000000000000000000000000000000000000000000000000000000d708000000000000ff78635346d78bb1869a7f00000000000008000000000000008d1109030000000000000000000000000000001800000000000600000000000000000000000000000122008000000000020000ff40020800f548a72876be4edee34b229bce16b900000037164680080c0273819001f18feebdce000000000000000000005bb71592cb0fbf3d0000ffffffffffffffe000000001800000f662639aa068e740ac5bf8de54e52600000000080000000000000009000000000000000800ff7070fa60d4bc295900000000000000000000000000000000000000002046df0bfa99bdc156ff0f21320cecdd061d5f881fa12e7c9e7c0ac904e31be414f8f0c0e41ef2030e490000000087b74cab69466aa32a545918006f46ed488b000000fbc9bdd305d78ee3b103977c5915194291f25e245ce5b261d72885a819fa85b22f2d6bbac581ca73a9dbed54ea1200000000daeeefe15a616c832bcb174b1eb027bbab28591ea3289dd8943cea66587e0a4ad48055a7f5e0724a25e283d09a3b2bbd96b3dc000000000000000000000000000000000000c2b69fae4d6b4cb8ac9a3c2ccb1e5c92b91df55b7ac2e1900b97284ee5ec26c0c24d0500ce1a574eb8c70ee204ea090000005b81ac1f3763e700000000000000000000000000000000000000000000000000000000000000000023635c257fe254ddcd6c6ff3ff4ba238fa2800359ae0ef191befc787bdfb5c4391f9ecf6ebacee6cf43526618f3e0b5569f86c85adf50e52ab05d6f446640e80a255196fa0ef404b3a9a4f419442102099a935cecad84d9e83e23c0ba967dd4a42e478f248ed4cc836ea01f6d3a85a448c"]) r3 = gettid() r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r5 = dup(r1) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000340)=r5) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) write$P9_RLOCK(r4, &(0x7f0000000440)={0x8, 0x35, 0x2, 0x4}, 0x8) socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000880)) r8 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x7f) perf_event_open(&(0x7f00000004c0)={0x3, 0x70, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x4, 0x40000, 0x8, 0x7fff, 0x2, 0x8db0, 0x0, 0xb42, 0x2, 0x9, 0xe0, 0x3, 0xa95, 0x200, 0xffffffff, 0x3, 0x84da, 0x4, 0xa7, 0x1, 0xffff, 0x3, 0x3, 0x80000000, 0xffffffffffffff81, 0x3f, 0x8, 0x40, 0x4, 0x5, 0x80, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x7fffffff, 0xb4}, 0x9, 0xc189, 0x100000000, 0x5, 0x0, 0xffffffff, 0x5}, r3, 0x9, r0, 0x8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$BLKGETSIZE64(r10, 0x80081272, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x1d, &(0x7f0000000300)={0x4, 0x4, 0x8000, 0x4, 0x10001}, 0x14) ioctl$TUNSETIFINDEX(r9, 0x400454da, &(0x7f0000000040)=r11) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) syz_mount_image$hfsplus(&(0x7f0000000180)='hfsplus\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 07:04:01 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x5, {0x1000, 0x0, 0x1, 0x3, 0x0, 0x100000000000}, 0x0, 0x4a08}, 0xe) 07:04:01 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) 07:04:01 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x7e00000000000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:04:01 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x4000, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f00000000c0)={0x2, 0x3, @stop_pts=0xa140}) syz_mount_image$hfsplus(&(0x7f0000000180)='hfsplus\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(0xffffffffffffff9c) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) 07:04:01 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) 07:04:01 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x5, {0x1000, 0x0, 0x1, 0x3, 0x0, 0x100000000000}, 0x0, 0x4a08}, 0xe) [ 620.162731][T28273] hfsplus: unable to find HFS+ superblock [ 620.246791][T28270] hfsplus: unable to find HFS+ superblock 07:04:01 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x4000, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f00000000c0)={0x2, 0x3, @stop_pts=0xa140}) syz_mount_image$hfsplus(&(0x7f0000000180)='hfsplus\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(0xffffffffffffff9c) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) 07:04:01 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) 07:04:01 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x5, {0x1000, 0x0, 0x1, 0x3, 0x0, 0x100000000000}, 0x0, 0x4a08}, 0xe) 07:04:01 executing program 5: r0 = syz_open_procfs(0x0, 0x0) sendfile(r0, r0, 0x0, 0x3) [ 620.410009][T28290] hfsplus: unable to find HFS+ superblock 07:04:02 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') sendfile(r0, r0, 0x0, 0x6) 07:04:02 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x7f51010000000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:04:02 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x4000000001, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x5, {0x1000, 0x0, 0x1, 0x3, 0x0, 0x100000000000}, 0x0, 0x4a08}, 0xe) 07:04:02 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]) r3 = gettid() r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r5 = dup(r1) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000340)=r5) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) write$P9_RLOCK(r4, &(0x7f0000000440)={0x8, 0x35, 0x2, 0x4}, 0x8) socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000880)) r8 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x7f) perf_event_open(&(0x7f00000004c0)={0x3, 0x70, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x4, 0x40000, 0x8, 0x7fff, 0x2, 0x8db0, 0x0, 0xb42, 0x2, 0x9, 0xe0, 0x3, 0xa95, 0x200, 0xffffffff, 0x3, 0x84da, 0x4, 0xa7, 0x1, 0xffff, 0x3, 0x3, 0x80000000, 0xffffffffffffff81, 0x3f, 0x8, 0x40, 0x4, 0x5, 0x80, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x7fffffff, 0xb4}, 0x9, 0xc189, 0x100000000, 0x5, 0x0, 0xffffffff, 0x5}, r3, 0x9, r0, 0x8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$BLKGETSIZE64(r10, 0x80081272, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x1d, &(0x7f0000000300)={0x4, 0x4, 0x8000, 0x4, 0x10001}, 0x14) ioctl$TUNSETIFINDEX(r9, 0x400454da, &(0x7f0000000040)=r11) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) syz_mount_image$hfsplus(&(0x7f0000000180)='hfsplus\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 07:04:02 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x4000, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f00000000c0)={0x2, 0x3, @stop_pts=0xa140}) syz_mount_image$hfsplus(&(0x7f0000000180)='hfsplus\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(0xffffffffffffff9c) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) 07:04:02 executing program 5: r0 = syz_open_procfs(0x0, 0x0) sendfile(r0, r0, 0x0, 0x3) 07:04:02 executing program 5: r0 = syz_open_procfs(0x0, 0x0) sendfile(r0, r0, 0x0, 0x3) 07:04:02 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x4000000001, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x5, {0x1000, 0x0, 0x1, 0x3, 0x0, 0x100000000000}, 0x0, 0x4a08}, 0xe) [ 621.167863][T28307] hfsplus: unable to find HFS+ superblock 07:04:02 executing program 0: ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000000)=0x0) sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x7b, 0xff80000000000000, 0x7f9e, 0x9, 0x42f8}, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000100)='~\x03\xcd\xfa\xec\x87y\xeb') exit(0xfffffffffffffffb) sendfile(r1, r1, 0x0, 0x3) [ 621.271425][T28310] hfsplus: unable to find HFS+ superblock 07:04:02 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x4000, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f00000000c0)={0x2, 0x3, @stop_pts=0xa140}) syz_mount_image$hfsplus(&(0x7f0000000180)='hfsplus\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) dup(0xffffffffffffff9c) 07:04:02 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x3) 07:04:02 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x8000000000000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:04:02 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x4000000001, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x5, {0x1000, 0x0, 0x1, 0x3, 0x0, 0x100000000000}, 0x0, 0x4a08}, 0xe) 07:04:02 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x3) [ 621.390962][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 621.396936][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 621.427398][T28325] hfsplus: unable to find HFS+ superblock 07:04:02 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x4000, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f00000000c0)={0x2, 0x3, @stop_pts=0xa140}) syz_mount_image$hfsplus(&(0x7f0000000180)='hfsplus\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 07:04:02 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]) r3 = gettid() r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r5 = dup(r1) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000340)=r5) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) write$P9_RLOCK(r4, &(0x7f0000000440)={0x8, 0x35, 0x2, 0x4}, 0x8) socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000880)) r8 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x7f) perf_event_open(&(0x7f00000004c0)={0x3, 0x70, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x4, 0x40000, 0x8, 0x7fff, 0x2, 0x8db0, 0x0, 0xb42, 0x2, 0x9, 0xe0, 0x3, 0xa95, 0x200, 0xffffffff, 0x3, 0x84da, 0x4, 0xa7, 0x1, 0xffff, 0x3, 0x3, 0x80000000, 0xffffffffffffff81, 0x3f, 0x8, 0x40, 0x4, 0x5, 0x80, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x7fffffff, 0xb4}, 0x9, 0xc189, 0x100000000, 0x5, 0x0, 0xffffffff, 0x5}, r3, 0x9, r0, 0x8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$BLKGETSIZE64(r10, 0x80081272, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x1d, &(0x7f0000000300)={0x4, 0x4, 0x8000, 0x4, 0x10001}, 0x14) ioctl$TUNSETIFINDEX(r9, 0x400454da, &(0x7f0000000040)=r11) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) 07:04:02 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x4000000001, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) 07:04:02 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x3) 07:04:02 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]) r3 = gettid() r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r5 = dup(r1) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000340)=r5) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) write$P9_RLOCK(r4, &(0x7f0000000440)={0x8, 0x35, 0x2, 0x4}, 0x8) socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000880)) r8 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x7f) perf_event_open(&(0x7f00000004c0)={0x3, 0x70, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x4, 0x40000, 0x8, 0x7fff, 0x2, 0x8db0, 0x0, 0xb42, 0x2, 0x9, 0xe0, 0x3, 0xa95, 0x200, 0xffffffff, 0x3, 0x84da, 0x4, 0xa7, 0x1, 0xffff, 0x3, 0x3, 0x80000000, 0xffffffffffffff81, 0x3f, 0x8, 0x40, 0x4, 0x5, 0x80, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x7fffffff, 0xb4}, 0x9, 0xc189, 0x100000000, 0x5, 0x0, 0xffffffff, 0x5}, r3, 0x9, r0, 0x8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$BLKGETSIZE64(r10, 0x80081272, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x1d, &(0x7f0000000300)={0x4, 0x4, 0x8000, 0x4, 0x10001}, 0x14) ioctl$TUNSETIFINDEX(r9, 0x400454da, &(0x7f0000000040)=r11) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) [ 621.663690][T28348] hfsplus: unable to find HFS+ superblock 07:04:02 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x8400000000000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) [ 621.790937][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 621.790973][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 621.796950][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 621.892799][T28356] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 621.903273][T28356] FAT-fs (loop1): Filesystem has been set read-only 07:04:03 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x4000, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f00000000c0)={0x2, 0x3, @stop_pts=0xa140}) 07:04:03 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x4000000001, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) 07:04:03 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x3) 07:04:03 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]) r3 = gettid() r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r5 = dup(r1) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000340)=r5) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) write$P9_RLOCK(r4, &(0x7f0000000440)={0x8, 0x35, 0x2, 0x4}, 0x8) socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000880)) r8 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x7f) perf_event_open(&(0x7f00000004c0)={0x3, 0x70, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x4, 0x40000, 0x8, 0x7fff, 0x2, 0x8db0, 0x0, 0xb42, 0x2, 0x9, 0xe0, 0x3, 0xa95, 0x200, 0xffffffff, 0x3, 0x84da, 0x4, 0xa7, 0x1, 0xffff, 0x3, 0x3, 0x80000000, 0xffffffffffffff81, 0x3f, 0x8, 0x40, 0x4, 0x5, 0x80, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x7fffffff, 0xb4}, 0x9, 0xc189, 0x100000000, 0x5, 0x0, 0xffffffff, 0x5}, r3, 0x9, r0, 0x8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$BLKGETSIZE64(r10, 0x80081272, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00'}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x1d, &(0x7f0000000300)={0x4, 0x4, 0x8000, 0x4, 0x10001}, 0x14) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) 07:04:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x8a00000000000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:04:03 executing program 0: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000000)=""/75) getpid() getpgid(0xffffffffffffffff) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000002c0)=0x0) r2 = syz_open_procfs(r1, &(0x7f00000001c0)='mountstats\x00') exit(0x0) sendfile(r2, r2, 0x0, 0x3) ioctl$TIOCSBRK(r2, 0x5427) 07:04:03 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x4000000001, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) 07:04:03 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x3) 07:04:03 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x4000, 0x0) 07:04:03 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x4000000001, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, {0x1000, 0x0, 0x1, 0x3, 0x0, 0x100000000000}, 0x0, 0x4a08}, 0xe) 07:04:03 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x3) 07:04:03 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="800000000000000007000000000000000100000000000000050000000000000003000000000000000509ff0100000000000000000000000000000000000000000000000900055eccb76a1b64d4574afe0000000000000000000004000000da2ed9428988bcdf43001f3de2035d0010000000000000000309000600000000000000000000000000000000010000000bbbcb056f0100000082ffffffffffffff090000000000000000097d58030300000000000000000000000000000000000000000000000000000100dc00000000000000010000000000000000000000000000d01e006b022f67706943000000100000000000002000000000000000000000000000000000000000000000000000000000d708000000000000ff78635346d78bb1869a7f00000000000008000000000000008d1109030000000000000000000000000000001800000000000600000000000000000000000000000122008000000000020000ff40020800f548a72876be4edee34b229bce16b900000037164680080c0273819001f18feebdce000000000000000000005bb71592cb0fbf3d0000ffffffffffffffe000000001800000f662639aa068e740ac5bf8de54e52600000000080000000000000009000000000000000800ff7070fa60d4bc295900000000000000000000000000000000000000002046df0bfa99bdc156ff0f21320cecdd061d5f881fa12e7c9e7c0ac904e31be414f8f0c0e41ef2030e490000000087b74cab69466aa32a545918006f46ed488b000000fbc9bdd305d78ee3b103977c5915194291f25e245ce5b261d72885a819fa85b22f2d6bbac581ca73a9dbed54ea1200000000daeeefe15a616c832bcb174b1eb027bbab28591ea3289dd8943cea66587e0a4ad48055a7f5e0724a25e283d09a3b2bbd96b3dc000000000000000000000000000000000000c2b69fae4d6b4cb8ac9a3c2ccb1e5c92b91df55b7ac2e1900b97284ee5ec26c0c24d0500ce1a574eb8c70ee204ea090000005b81ac1f3763e700000000000000000000000000000000000000000000000000000000000000000023635c257fe254ddcd6c6ff3ff4ba238fa2800359ae0ef191befc787bdfb5c4391f9ecf6ebacee6cf43526618f3e0b5569f86c85adf50e52ab05d6f446640e80a255196fa0ef404b3a9a4f419442102099a935cecad84d9e83e23c0ba967dd4a42e478f248ed4cc836ea01f6d3a85a448c"]) r3 = gettid() r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r5 = dup(r1) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000340)=r5) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) write$P9_RLOCK(r4, &(0x7f0000000440)={0x8, 0x35, 0x2, 0x4}, 0x8) socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000880)) r8 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x7f) perf_event_open(&(0x7f00000004c0)={0x3, 0x70, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x4, 0x40000, 0x8, 0x7fff, 0x2, 0x8db0, 0x0, 0xb42, 0x2, 0x9, 0xe0, 0x3, 0xa95, 0x200, 0xffffffff, 0x3, 0x84da, 0x4, 0xa7, 0x1, 0xffff, 0x3, 0x3, 0x80000000, 0xffffffffffffff81, 0x3f, 0x8, 0x40, 0x4, 0x5, 0x80, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x7fffffff, 0xb4}, 0x9, 0xc189, 0x100000000, 0x5, 0x0, 0xffffffff, 0x5}, r3, 0x9, r0, 0x8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$BLKGETSIZE64(r10, 0x80081272, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00'}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x1d, &(0x7f0000000300)={0x4, 0x4, 0x8000, 0x4, 0x10001}, 0x14) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) 07:04:03 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x4000000001, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, {0x0, 0x0, 0x1, 0x3, 0x0, 0x100000000000}, 0x0, 0x4a08}, 0xe) 07:04:03 executing program 3: openat$rtc(0xffffffffffffff9c, 0x0, 0x4000, 0x0) 07:04:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xfeffffff00000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:04:03 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') sendfile(r0, r0, 0x0, 0x0) [ 622.670994][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 622.676917][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 622.682816][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 622.831568][T28395] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 622.854243][T28395] FAT-fs (loop1): Filesystem has been set read-only 07:04:04 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x9, 0x0) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000040)=0x6, &(0x7f00000000c0)=0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') exit(0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) sendfile(r1, r1, 0x0, 0x3) 07:04:04 executing program 3: openat$rtc(0xffffffffffffff9c, 0x0, 0x4000, 0x0) 07:04:04 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x4000000001, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x3, 0x0, 0x100000000000}, 0x0, 0x4a08}, 0xe) 07:04:04 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') sendfile(r0, r0, 0x0, 0x0) 07:04:04 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xff0f000000000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:04:04 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="800000000000000007000000000000000100000000000000050000000000000003000000000000000509ff0100000000000000000000000000000000000000000000000900055eccb76a1b64d4574afe0000000000000000000004000000da2ed9428988bcdf43001f3de2035d0010000000000000000309000600000000000000000000000000000000010000000bbbcb056f0100000082ffffffffffffff090000000000000000097d58030300000000000000000000000000000000000000000000000000000100dc00000000000000010000000000000000000000000000d01e006b022f67706943000000100000000000002000000000000000000000000000000000000000000000000000000000d708000000000000ff78635346d78bb1869a7f00000000000008000000000000008d1109030000000000000000000000000000001800000000000600000000000000000000000000000122008000000000020000ff40020800f548a72876be4edee34b229bce16b900000037164680080c0273819001f18feebdce000000000000000000005bb71592cb0fbf3d0000ffffffffffffffe000000001800000f662639aa068e740ac5bf8de54e52600000000080000000000000009000000000000000800ff7070fa60d4bc295900000000000000000000000000000000000000002046df0bfa99bdc156ff0f21320cecdd061d5f881fa12e7c9e7c0ac904e31be414f8f0c0e41ef2030e490000000087b74cab69466aa32a545918006f46ed488b000000fbc9bdd305d78ee3b103977c5915194291f25e245ce5b261d72885a819fa85b22f2d6bbac581ca73a9dbed54ea1200000000daeeefe15a616c832bcb174b1eb027bbab28591ea3289dd8943cea66587e0a4ad48055a7f5e0724a25e283d09a3b2bbd96b3dc000000000000000000000000000000000000c2b69fae4d6b4cb8ac9a3c2ccb1e5c92b91df55b7ac2e1900b97284ee5ec26c0c24d0500ce1a574eb8c70ee204ea090000005b81ac1f3763e700000000000000000000000000000000000000000000000000000000000000000023635c257fe254ddcd6c6ff3ff4ba238fa2800359ae0ef191befc787bdfb5c4391f9ecf6ebacee6cf43526618f3e0b5569f86c85adf50e52ab05d6f446640e80a255196fa0ef404b3a9a4f419442102099a935cecad84d9e83e23c0ba967dd4a42e478f248ed4cc836ea01f6d3a85a448c"]) r3 = gettid() r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r5 = dup(r1) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000340)=r5) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) write$P9_RLOCK(r4, &(0x7f0000000440)={0x8, 0x35, 0x2, 0x4}, 0x8) socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000880)) r8 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x7f) perf_event_open(&(0x7f00000004c0)={0x3, 0x70, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x4, 0x40000, 0x8, 0x7fff, 0x2, 0x8db0, 0x0, 0xb42, 0x2, 0x9, 0xe0, 0x3, 0xa95, 0x200, 0xffffffff, 0x3, 0x84da, 0x4, 0xa7, 0x1, 0xffff, 0x3, 0x3, 0x80000000, 0xffffffffffffff81, 0x3f, 0x8, 0x40, 0x4, 0x5, 0x80, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x7fffffff, 0xb4}, 0x9, 0xc189, 0x100000000, 0x5, 0x0, 0xffffffff, 0x5}, r3, 0x9, r0, 0x8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$BLKGETSIZE64(r10, 0x80081272, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00'}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x1d, &(0x7f0000000300)={0x4, 0x4, 0x8000, 0x4, 0x10001}, 0x14) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) 07:04:04 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') sendfile(r0, r0, 0x0, 0x0) 07:04:04 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x4000000001, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0x4a08}, 0xe) 07:04:04 executing program 3: openat$rtc(0xffffffffffffff9c, 0x0, 0x4000, 0x0) [ 623.340589][T28409] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 623.368002][T28409] FAT-fs (loop1): Filesystem has been set read-only 07:04:04 executing program 5: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000000)=""/75) getpid() getpgid(0xffffffffffffffff) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000002c0)=0x0) r2 = syz_open_procfs(r1, &(0x7f00000001c0)='mountstats\x00') exit(0x0) sendfile(r2, r2, 0x0, 0x3) ioctl$TIOCSBRK(r2, 0x5427) 07:04:04 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) 07:04:04 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]) r3 = gettid() r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r5 = dup(r1) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000340)=r5) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) write$P9_RLOCK(r4, &(0x7f0000000440)={0x8, 0x35, 0x2, 0x4}, 0x8) socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000880)) r8 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x7f) perf_event_open(&(0x7f00000004c0)={0x3, 0x70, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x4, 0x40000, 0x8, 0x7fff, 0x2, 0x8db0, 0x0, 0xb42, 0x2, 0x9, 0xe0, 0x3, 0xa95, 0x200, 0xffffffff, 0x3, 0x84da, 0x4, 0xa7, 0x1, 0xffff, 0x3, 0x3, 0x80000000, 0xffffffffffffff81, 0x3f, 0x8, 0x40, 0x4, 0x5, 0x80, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x7fffffff, 0xb4}, 0x9, 0xc189, 0x100000000, 0x5, 0x0, 0xffffffff, 0x5}, r3, 0x9, r0, 0x8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$BLKGETSIZE64(r10, 0x80081272, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(r9, 0x400454da, &(0x7f0000000040)=r11) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) 07:04:05 executing program 0: gettid() ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/netfilter\x00') exit(0x3) sendfile(r1, r1, 0x0, 0x3) 07:04:05 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x4000000001, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, {}, 0x0, 0x4a08}, 0xe) 07:04:05 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xffffff7f00000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:04:05 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) 07:04:05 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]) r3 = gettid() r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r5 = dup(r1) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000340)=r5) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) socket$inet6(0xa, 0x2, 0x0) write$P9_RLOCK(r4, &(0x7f0000000440)={0x8, 0x35, 0x2, 0x4}, 0x8) socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000880)) r7 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x7f) perf_event_open(&(0x7f00000004c0)={0x3, 0x70, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x4, 0x40000, 0x8, 0x7fff, 0x2, 0x8db0, 0x0, 0xb42, 0x2, 0x9, 0xe0, 0x3, 0xa95, 0x200, 0xffffffff, 0x3, 0x84da, 0x4, 0xa7, 0x1, 0xffff, 0x3, 0x3, 0x80000000, 0xffffffffffffff81, 0x3f, 0x8, 0x40, 0x4, 0x5, 0x80, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x7fffffff, 0xb4}, 0x9, 0xc189, 0x100000000, 0x5, 0x0, 0xffffffff, 0x5}, r3, 0x9, r0, 0x8) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$BLKGETSIZE64(r9, 0x80081272, &(0x7f0000000140)) ioctl$TUNSETIFINDEX(r8, 0x400454da, &(0x7f0000000040)) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) 07:04:05 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) 07:04:05 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x4000000001, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080), 0xe) 07:04:05 executing program 5: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000000)=""/75) getpid() getpgid(0xffffffffffffffff) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000002c0)=0x0) r2 = syz_open_procfs(r1, &(0x7f00000001c0)='mountstats\x00') exit(0x0) sendfile(r2, r2, 0x0, 0x3) ioctl$TIOCSBRK(r2, 0x5427) [ 624.300103][T28442] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 624.309019][T28442] FAT-fs (loop1): Filesystem has been set read-only 07:04:05 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xff0f000000000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:04:05 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x4000000001, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080), 0xe) 07:04:05 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xffffffff00000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:04:05 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="800000000000000007000000000000000100000000000000050000000000000003000000000000000509ff0100000000000000000000000000000000000000000000000900055eccb76a1b64d4574afe0000000000000000000004000000da2ed9428988bcdf43001f3de2035d0010000000000000000309000600000000000000000000000000000000010000000bbbcb056f0100000082ffffffffffffff090000000000000000097d58030300000000000000000000000000000000000000000000000000000100dc00000000000000010000000000000000000000000000d01e006b022f67706943000000100000000000002000000000000000000000000000000000000000000000000000000000d708000000000000ff78635346d78bb1869a7f00000000000008000000000000008d1109030000000000000000000000000000001800000000000600000000000000000000000000000122008000000000020000ff40020800f548a72876be4edee34b229bce16b900000037164680080c0273819001f18feebdce000000000000000000005bb71592cb0fbf3d0000ffffffffffffffe000000001800000f662639aa068e740ac5bf8de54e52600000000080000000000000009000000000000000800ff7070fa60d4bc295900000000000000000000000000000000000000002046df0bfa99bdc156ff0f21320cecdd061d5f881fa12e7c9e7c0ac904e31be414f8f0c0e41ef2030e490000000087b74cab69466aa32a545918006f46ed488b000000fbc9bdd305d78ee3b103977c5915194291f25e245ce5b261d72885a819fa85b22f2d6bbac581ca73a9dbed54ea1200000000daeeefe15a616c832bcb174b1eb027bbab28591ea3289dd8943cea66587e0a4ad48055a7f5e0724a25e283d09a3b2bbd96b3dc000000000000000000000000000000000000c2b69fae4d6b4cb8ac9a3c2ccb1e5c92b91df55b7ac2e1900b97284ee5ec26c0c24d0500ce1a574eb8c70ee204ea090000005b81ac1f3763e700000000000000000000000000000000000000000000000000000000000000000023635c257fe254ddcd6c6ff3ff4ba238fa2800359ae0ef191befc787bdfb5c4391f9ecf6ebacee6cf43526618f3e0b5569f86c85adf50e52ab05d6f446640e80a255196fa0ef404b3a9a4f419442102099a935cecad84d9e83e23c0ba967dd4a42e478f248ed4cc836ea01f6d3a85a448c"]) r3 = gettid() r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r5 = dup(r1) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000340)=r5) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) socket$inet6(0xa, 0x2, 0x0) write$P9_RLOCK(r4, &(0x7f0000000440)={0x8, 0x35, 0x2, 0x4}, 0x8) socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000880)) r7 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x7f) perf_event_open(&(0x7f00000004c0)={0x3, 0x70, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x4, 0x40000, 0x8, 0x7fff, 0x2, 0x8db0, 0x0, 0xb42, 0x2, 0x9, 0xe0, 0x3, 0xa95, 0x200, 0xffffffff, 0x3, 0x84da, 0x4, 0xa7, 0x1, 0xffff, 0x3, 0x3, 0x80000000, 0xffffffffffffff81, 0x3f, 0x8, 0x40, 0x4, 0x5, 0x80, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x7fffffff, 0xb4}, 0x9, 0xc189, 0x100000000, 0x5, 0x0, 0xffffffff, 0x5}, r3, 0x9, r0, 0x8) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$BLKGETSIZE64(r9, 0x80081272, &(0x7f0000000140)) ioctl$TUNSETIFINDEX(r8, 0x400454da, &(0x7f0000000040)) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) [ 624.630105][T28464] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 624.680753][T28464] FAT-fs (loop1): Filesystem has been set read-only [ 624.750952][ C0] net_ratelimit: 9 callbacks suppressed [ 624.750961][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 624.762745][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 624.768640][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 624.774466][ C0] protocol 88fb is buggy, dev hsr_slave_1 07:04:06 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') exit(0x0) sendfile(r0, r0, 0x0, 0x3) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) 07:04:06 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="800000000000000007000000000000000100000000000000050000000000000003000000000000000509ff0100000000000000000000000000000000000000000000000900055eccb76a1b64d4574afe0000000000000000000004000000da2ed9428988bcdf43001f3de2035d0010000000000000000309000600000000000000000000000000000000010000000bbbcb056f0100000082ffffffffffffff090000000000000000097d58030300000000000000000000000000000000000000000000000000000100dc00000000000000010000000000000000000000000000d01e006b022f67706943000000100000000000002000000000000000000000000000000000000000000000000000000000d708000000000000ff78635346d78bb1869a7f00000000000008000000000000008d1109030000000000000000000000000000001800000000000600000000000000000000000000000122008000000000020000ff40020800f548a72876be4edee34b229bce16b900000037164680080c0273819001f18feebdce000000000000000000005bb71592cb0fbf3d0000ffffffffffffffe000000001800000f662639aa068e740ac5bf8de54e52600000000080000000000000009000000000000000800ff7070fa60d4bc295900000000000000000000000000000000000000002046df0bfa99bdc156ff0f21320cecdd061d5f881fa12e7c9e7c0ac904e31be414f8f0c0e41ef2030e490000000087b74cab69466aa32a545918006f46ed488b000000fbc9bdd305d78ee3b103977c5915194291f25e245ce5b261d72885a819fa85b22f2d6bbac581ca73a9dbed54ea1200000000daeeefe15a616c832bcb174b1eb027bbab28591ea3289dd8943cea66587e0a4ad48055a7f5e0724a25e283d09a3b2bbd96b3dc000000000000000000000000000000000000c2b69fae4d6b4cb8ac9a3c2ccb1e5c92b91df55b7ac2e1900b97284ee5ec26c0c24d0500ce1a574eb8c70ee204ea090000005b81ac1f3763e700000000000000000000000000000000000000000000000000000000000000000023635c257fe254ddcd6c6ff3ff4ba238fa2800359ae0ef191befc787bdfb5c4391f9ecf6ebacee6cf43526618f3e0b5569f86c85adf50e52ab05d6f446640e80a255196fa0ef404b3a9a4f419442102099a935cecad84d9e83e23c0ba967dd4a42e478f248ed4cc836ea01f6d3a85a448c"]) r3 = gettid() r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r5 = dup(r1) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000340)=r5) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) socket$inet6(0xa, 0x2, 0x0) write$P9_RLOCK(r4, &(0x7f0000000440)={0x8, 0x35, 0x2, 0x4}, 0x8) socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000880)) r7 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x7f) perf_event_open(&(0x7f00000004c0)={0x3, 0x70, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x4, 0x40000, 0x8, 0x7fff, 0x2, 0x8db0, 0x0, 0xb42, 0x2, 0x9, 0xe0, 0x3, 0xa95, 0x200, 0xffffffff, 0x3, 0x84da, 0x4, 0xa7, 0x1, 0xffff, 0x3, 0x3, 0x80000000, 0xffffffffffffff81, 0x3f, 0x8, 0x40, 0x4, 0x5, 0x80, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x7fffffff, 0xb4}, 0x9, 0xc189, 0x100000000, 0x5, 0x0, 0xffffffff, 0x5}, r3, 0x9, r0, 0x8) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$BLKGETSIZE64(r9, 0x80081272, &(0x7f0000000140)) ioctl$TUNSETIFINDEX(r8, 0x400454da, &(0x7f0000000040)) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) 07:04:06 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x4000000001, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080), 0xe) 07:04:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xffffffffffffffff, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:04:06 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xffffff7f00000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:04:06 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xffffff7f00000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:04:06 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]) r3 = gettid() r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r5 = dup(r1) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000340)=r5) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) write$P9_RLOCK(r4, &(0x7f0000000440)={0x8, 0x35, 0x2, 0x4}, 0x8) socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000880)) r8 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x7f) perf_event_open(&(0x7f00000004c0)={0x3, 0x70, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x4, 0x40000, 0x8, 0x7fff, 0x2, 0x8db0, 0x0, 0xb42, 0x2, 0x9, 0xe0, 0x3, 0xa95, 0x200, 0xffffffff, 0x3, 0x84da, 0x4, 0xa7, 0x1, 0xffff, 0x3, 0x3, 0x80000000, 0xffffffffffffff81, 0x3f, 0x8, 0x40, 0x4, 0x5, 0x80, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x7fffffff, 0xb4}, 0x9, 0xc189, 0x100000000, 0x5, 0x0, 0xffffffff, 0x5}, r3, 0x9, r0, 0x8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(r9, 0x400454da, &(0x7f0000000040)=r10) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) 07:04:06 executing program 5: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000000)=""/75) getpid() getpgid(0xffffffffffffffff) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000002c0)=0x0) r2 = syz_open_procfs(r1, &(0x7f00000001c0)='mountstats\x00') exit(0x0) sendfile(r2, r2, 0x0, 0x3) ioctl$TIOCSBRK(r2, 0x5427) 07:04:06 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]) r3 = gettid() r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r5 = dup(r1) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000340)=r5) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) write$P9_RLOCK(r4, &(0x7f0000000440)={0x8, 0x35, 0x2, 0x4}, 0x8) socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000880)) r8 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x7f) perf_event_open(&(0x7f00000004c0)={0x3, 0x70, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x4, 0x40000, 0x8, 0x7fff, 0x2, 0x8db0, 0x0, 0xb42, 0x2, 0x9, 0xe0, 0x3, 0xa95, 0x200, 0xffffffff, 0x3, 0x84da, 0x4, 0xa7, 0x1, 0xffff, 0x3, 0x3, 0x80000000, 0xffffffffffffff81, 0x3f, 0x8, 0x40, 0x4, 0x5, 0x80, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x7fffffff, 0xb4}, 0x9, 0xc189, 0x100000000, 0x5, 0x0, 0xffffffff, 0x5}, r3, 0x9, r0, 0x8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(r9, 0x400454da, &(0x7f0000000040)=r10) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) [ 625.311164][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 625.318013][ C0] protocol 88fb is buggy, dev hsr_slave_1 07:04:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000680)=ANY=[@ANYBLOB="a40000000000f5c15cb884c35e43e3bf7344d30b410333408ebe06dc8e3f84f8f944e89afe180968241207fecc19033cc3b9ce8145bf46ed36fec7cee4349a6c10ae201aea2fb69ffe586c03f7bb324a35011c9a7ee7c8ae00ee68f2302219a48b0704e0c851820024a481195f29a29072ca75af23ee0d6a81d01393db0357d274bf0127dd9551572446e6f25074f069428b2c1dcb4dea3d27940794f073cbf75925513bc4f83d24cd8cea8a4286b7262754d3978c20de59753e63619aac2c"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000880)=""/4096, &(0x7f0000000300)=""/201, &(0x7f0000000580)=""/146, 0x10000}) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="bdacb177803e8427aaf10c42081a432b202566ffe3fabb59f74556d355624ee39b6efcee647543fe23504ab0362f1fe16905ff0e639ce3"], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:04:06 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]) r3 = gettid() r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r5 = dup(r1) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000340)=r5) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) write$P9_RLOCK(r4, &(0x7f0000000440)={0x8, 0x35, 0x2, 0x4}, 0x8) socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000880)) r8 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x7f) perf_event_open(&(0x7f00000004c0)={0x3, 0x70, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x4, 0x40000, 0x8, 0x7fff, 0x2, 0x8db0, 0x0, 0xb42, 0x2, 0x9, 0xe0, 0x3, 0xa95, 0x200, 0xffffffff, 0x3, 0x84da, 0x4, 0xa7, 0x1, 0xffff, 0x3, 0x3, 0x80000000, 0xffffffffffffff81, 0x3f, 0x8, 0x40, 0x4, 0x5, 0x80, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x7fffffff, 0xb4}, 0x9, 0xc189, 0x100000000, 0x5, 0x0, 0xffffffff, 0x5}, r3, 0x9, r0, 0x8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000040)=r9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) 07:04:06 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="800000000000000007000000000000000100000000000000050000000000000003000000000000000509ff0100000000000000000000000000000000000000000000000900055eccb76a1b64d4574afe0000000000000000000004000000da2ed9428988bcdf43001f3de2035d0010000000000000000309000600000000000000000000000000000000010000000bbbcb056f0100000082ffffffffffffff090000000000000000097d58030300000000000000000000000000000000000000000000000000000100dc00000000000000010000000000000000000000000000d01e006b022f67706943000000100000000000002000000000000000000000000000000000000000000000000000000000d708000000000000ff78635346d78bb1869a7f00000000000008000000000000008d1109030000000000000000000000000000001800000000000600000000000000000000000000000122008000000000020000ff40020800f548a72876be4edee34b229bce16b900000037164680080c0273819001f18feebdce000000000000000000005bb71592cb0fbf3d0000ffffffffffffffe000000001800000f662639aa068e740ac5bf8de54e52600000000080000000000000009000000000000000800ff7070fa60d4bc295900000000000000000000000000000000000000002046df0bfa99bdc156ff0f21320cecdd061d5f881fa12e7c9e7c0ac904e31be414f8f0c0e41ef2030e490000000087b74cab69466aa32a545918006f46ed488b000000fbc9bdd305d78ee3b103977c5915194291f25e245ce5b261d72885a819fa85b22f2d6bbac581ca73a9dbed54ea1200000000daeeefe15a616c832bcb174b1eb027bbab28591ea3289dd8943cea66587e0a4ad48055a7f5e0724a25e283d09a3b2bbd96b3dc000000000000000000000000000000000000c2b69fae4d6b4cb8ac9a3c2ccb1e5c92b91df55b7ac2e1900b97284ee5ec26c0c24d0500ce1a574eb8c70ee204ea090000005b81ac1f3763e700000000000000000000000000000000000000000000000000000000000000000023635c257fe254ddcd6c6ff3ff4ba238fa2800359ae0ef191befc787bdfb5c4391f9ecf6ebacee6cf43526618f3e0b5569f86c85adf50e52ab05d6f446640e80a255196fa0ef404b3a9a4f419442102099a935cecad84d9e83e23c0ba967dd4a42e478f248ed4cc836ea01f6d3a85a448c"]) r3 = gettid() r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r5 = dup(r1) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000340)=r5) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) write$P9_RLOCK(r4, &(0x7f0000000440)={0x8, 0x35, 0x2, 0x4}, 0x8) socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000880)) r8 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x7f) perf_event_open(&(0x7f00000004c0)={0x3, 0x70, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x4, 0x40000, 0x8, 0x7fff, 0x2, 0x8db0, 0x0, 0xb42, 0x2, 0x9, 0xe0, 0x3, 0xa95, 0x200, 0xffffffff, 0x3, 0x84da, 0x4, 0xa7, 0x1, 0xffff, 0x3, 0x3, 0x80000000, 0xffffffffffffff81, 0x3f, 0x8, 0x40, 0x4, 0x5, 0x80, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x7fffffff, 0xb4}, 0x9, 0xc189, 0x100000000, 0x5, 0x0, 0xffffffff, 0x5}, r3, 0x9, r0, 0x8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(r9, 0x400454da, &(0x7f0000000040)=r10) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) [ 625.551283][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 625.557422][ C1] protocol 88fb is buggy, dev hsr_slave_1 07:04:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x80400, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='cpuset\x00') exit(0x1000000000000) sendfile(r1, r1, 0x0, 0x3) 07:04:07 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]) r3 = gettid() r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r5 = dup(r1) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000340)=r5) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) write$P9_RLOCK(r4, &(0x7f0000000440)={0x8, 0x35, 0x2, 0x4}, 0x8) socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000880)) r8 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x7f) perf_event_open(&(0x7f00000004c0)={0x3, 0x70, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x4, 0x40000, 0x8, 0x7fff, 0x2, 0x8db0, 0x0, 0xb42, 0x2, 0x9, 0xe0, 0x3, 0xa95, 0x200, 0xffffffff, 0x3, 0x84da, 0x4, 0xa7, 0x1, 0xffff, 0x3, 0x3, 0x80000000, 0xffffffffffffff81, 0x3f, 0x8, 0x40, 0x4, 0x5, 0x80, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x7fffffff, 0xb4}, 0x9, 0xc189, 0x100000000, 0x5, 0x0, 0xffffffff, 0x5}, r3, 0x9, r0, 0x8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000040)=r9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) 07:04:07 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]) r3 = gettid() r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r5 = dup(r1) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000340)=r5) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) write$P9_RLOCK(r4, &(0x7f0000000440)={0x8, 0x35, 0x2, 0x4}, 0x8) socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000880)) r8 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x7f) perf_event_open(&(0x7f00000004c0)={0x3, 0x70, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x4, 0x40000, 0x8, 0x7fff, 0x2, 0x8db0, 0x0, 0xb42, 0x2, 0x9, 0xe0, 0x3, 0xa95, 0x200, 0xffffffff, 0x3, 0x84da, 0x4, 0xa7, 0x1, 0xffff, 0x3, 0x3, 0x80000000, 0xffffffffffffff81, 0x3f, 0x8, 0x40, 0x4, 0x5, 0x80, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x7fffffff, 0xb4}, 0x9, 0xc189, 0x100000000, 0x5, 0x0, 0xffffffff, 0x5}, r3, 0x9, r0, 0x8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$BLKGETSIZE64(r10, 0x80081272, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00'}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x1d, &(0x7f0000000300)={0x4, 0x4, 0x8000, 0x4, 0x10001}, 0x14) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) 07:04:07 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]) r3 = gettid() r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r5 = dup(r1) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000340)=r5) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) write$P9_RLOCK(r4, &(0x7f0000000440)={0x8, 0x35, 0x2, 0x4}, 0x8) socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000880)) r8 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x7f) perf_event_open(&(0x7f00000004c0)={0x3, 0x70, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x4, 0x40000, 0x8, 0x7fff, 0x2, 0x8db0, 0x0, 0xb42, 0x2, 0x9, 0xe0, 0x3, 0xa95, 0x200, 0xffffffff, 0x3, 0x84da, 0x4, 0xa7, 0x1, 0xffff, 0x3, 0x3, 0x80000000, 0xffffffffffffff81, 0x3f, 0x8, 0x40, 0x4, 0x5, 0x80, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x7fffffff, 0xb4}, 0x9, 0xc189, 0x100000000, 0x5, 0x0, 0xffffffff, 0x5}, r3, 0x9, r0, 0x8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(r9, 0x400454da, &(0x7f0000000040)=r10) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) [ 625.950938][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 625.950974][ C1] protocol 88fb is buggy, dev hsr_slave_1 07:04:07 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]) r3 = gettid() r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r5 = dup(r1) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000340)=r5) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) write$P9_RLOCK(r4, &(0x7f0000000440)={0x8, 0x35, 0x2, 0x4}, 0x8) socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000880)) r8 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x7f) perf_event_open(&(0x7f00000004c0)={0x3, 0x70, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x4, 0x40000, 0x8, 0x7fff, 0x2, 0x8db0, 0x0, 0xb42, 0x2, 0x9, 0xe0, 0x3, 0xa95, 0x200, 0xffffffff, 0x3, 0x84da, 0x4, 0xa7, 0x1, 0xffff, 0x3, 0x3, 0x80000000, 0xffffffffffffff81, 0x3f, 0x8, 0x40, 0x4, 0x5, 0x80, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x7fffffff, 0xb4}, 0x9, 0xc189, 0x100000000, 0x5, 0x0, 0xffffffff, 0x5}, r3, 0x9, r0, 0x8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000040)=r9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) 07:04:07 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]) r3 = gettid() r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r5 = dup(r1) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000340)=r5) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) write$P9_RLOCK(r4, &(0x7f0000000440)={0x8, 0x35, 0x2, 0x4}, 0x8) socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000880)) r8 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x7f) perf_event_open(&(0x7f00000004c0)={0x3, 0x70, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x4, 0x40000, 0x8, 0x7fff, 0x2, 0x8db0, 0x0, 0xb42, 0x2, 0x9, 0xe0, 0x3, 0xa95, 0x200, 0xffffffff, 0x3, 0x84da, 0x4, 0xa7, 0x1, 0xffff, 0x3, 0x3, 0x80000000, 0xffffffffffffff81, 0x3f, 0x8, 0x40, 0x4, 0x5, 0x80, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x7fffffff, 0xb4}, 0x9, 0xc189, 0x100000000, 0x5, 0x0, 0xffffffff, 0x5}, r3, 0x9, r0, 0x8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(r9, 0x400454da, &(0x7f0000000040)=r10) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) 07:04:07 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xfeffffff00000000, 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:04:07 executing program 5: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000000)=""/75) getpid() getpgid(0xffffffffffffffff) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000002c0)=0x0) r2 = syz_open_procfs(r1, &(0x7f00000001c0)='mountstats\x00') exit(0x0) sendfile(r2, r2, 0x0, 0x3) 07:04:07 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="800000000000000007000000000000000100000000000000050000000000000003000000000000000509ff0100000000000000000000000000000000000000000000000900055eccb76a1b64d4574afe0000000000000000000004000000da2ed9428988bcdf43001f3de2035d0010000000000000000309000600000000000000000000000000000000010000000bbbcb056f0100000082ffffffffffffff090000000000000000097d58030300000000000000000000000000000000000000000000000000000100dc00000000000000010000000000000000000000000000d01e006b022f67706943000000100000000000002000000000000000000000000000000000000000000000000000000000d708000000000000ff78635346d78bb1869a7f00000000000008000000000000008d1109030000000000000000000000000000001800000000000600000000000000000000000000000122008000000000020000ff40020800f548a72876be4edee34b229bce16b900000037164680080c0273819001f18feebdce000000000000000000005bb71592cb0fbf3d0000ffffffffffffffe000000001800000f662639aa068e740ac5bf8de54e52600000000080000000000000009000000000000000800ff7070fa60d4bc295900000000000000000000000000000000000000002046df0bfa99bdc156ff0f21320cecdd061d5f881fa12e7c9e7c0ac904e31be414f8f0c0e41ef2030e490000000087b74cab69466aa32a545918006f46ed488b000000fbc9bdd305d78ee3b103977c5915194291f25e245ce5b261d72885a819fa85b22f2d6bbac581ca73a9dbed54ea1200000000daeeefe15a616c832bcb174b1eb027bbab28591ea3289dd8943cea66587e0a4ad48055a7f5e0724a25e283d09a3b2bbd96b3dc000000000000000000000000000000000000c2b69fae4d6b4cb8ac9a3c2ccb1e5c92b91df55b7ac2e1900b97284ee5ec26c0c24d0500ce1a574eb8c70ee204ea090000005b81ac1f3763e700000000000000000000000000000000000000000000000000000000000000000023635c257fe254ddcd6c6ff3ff4ba238fa2800359ae0ef191befc787bdfb5c4391f9ecf6ebacee6cf43526618f3e0b5569f86c85adf50e52ab05d6f446640e80a255196fa0ef404b3a9a4f419442102099a935cecad84d9e83e23c0ba967dd4a42e478f248ed4cc836ea01f6d3a85a448c"]) gettid() r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r3 = dup(r0) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000340)=r3) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) write$P9_RLOCK(r2, &(0x7f0000000440)={0x8, 0x35, 0x2, 0x4}, 0x8) socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000880)) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x7f) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(r7, 0x400454da, &(0x7f0000000040)=r8) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) [ 626.454244][T28537] FAT-fs (loop2): error, invalid access to FAT (entry 0x00006500) [ 626.489254][T28537] FAT-fs (loop2): Filesystem has been set read-only 07:04:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) shutdown(r1, 0x1) creat(&(0x7f0000000080)='./bus\x00', 0x0) 07:04:07 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]) r3 = gettid() r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r5 = dup(r1) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000340)=r5) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) write$P9_RLOCK(r4, &(0x7f0000000440)={0x8, 0x35, 0x2, 0x4}, 0x8) socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000880)) r8 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x7f) perf_event_open(&(0x7f00000004c0)={0x3, 0x70, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x4, 0x40000, 0x8, 0x7fff, 0x2, 0x8db0, 0x0, 0xb42, 0x2, 0x9, 0xe0, 0x3, 0xa95, 0x200, 0xffffffff, 0x3, 0x84da, 0x4, 0xa7, 0x1, 0xffff, 0x3, 0x3, 0x80000000, 0xffffffffffffff81, 0x3f, 0x8, 0x40, 0x4, 0x5, 0x80, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x7fffffff, 0xb4}, 0x9, 0xc189, 0x100000000, 0x5, 0x0, 0xffffffff, 0x5}, r3, 0x9, r0, 0x8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$BLKGETSIZE64(r10, 0x80081272, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x1d, &(0x7f0000000300)={0x4, 0x4, 0x8000, 0x4, 0x10001}, 0x14) ioctl$TUNSETIFINDEX(r9, 0x400454da, &(0x7f0000000040)=r11) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) 07:04:07 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) getpeername(r0, &(0x7f0000000000)=@ethernet={0x0, @remote}, &(0x7f0000000080)=0x80) r1 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x7fffffff, 0x50440) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000140), 0x1) 07:04:08 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]) gettid() r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r3 = dup(r0) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000340)=r3) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) write$P9_RLOCK(r2, &(0x7f0000000440)={0x8, 0x35, 0x2, 0x4}, 0x8) socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000880)) openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(r6, 0x400454da, &(0x7f0000000040)=r7) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) 07:04:08 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) getpeername(r0, &(0x7f0000000000)=@ethernet={0x0, @remote}, &(0x7f0000000080)=0x80) r1 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x7fffffff, 0x50440) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000140), 0x1) 07:04:08 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x4, 0x101000) ioctl$KVM_S390_INTERRUPT_CPU(r0, 0x4010ae94, &(0x7f0000000040)={0xff, 0x3, 0x8000}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') exit(0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x7, 0x80000000, 0x4, 0x7, 0x6}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000140)={r2, 0xfffffffffffffafb, 0x20}, 0x8) sendfile(r1, r1, 0x0, 0x43) 07:04:08 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]) r3 = gettid() r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r5 = dup(r1) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000340)=r5) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) write$P9_RLOCK(r4, &(0x7f0000000440)={0x8, 0x35, 0x2, 0x4}, 0x8) socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000880)) r8 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x7f) perf_event_open(&(0x7f00000004c0)={0x3, 0x70, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x4, 0x40000, 0x8, 0x7fff, 0x2, 0x8db0, 0x0, 0xb42, 0x2, 0x9, 0xe0, 0x3, 0xa95, 0x200, 0xffffffff, 0x3, 0x84da, 0x4, 0xa7, 0x1, 0xffff, 0x3, 0x3, 0x80000000, 0xffffffffffffff81, 0x3f, 0x8, 0x40, 0x4, 0x5, 0x80, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x7fffffff, 0xb4}, 0x9, 0xc189, 0x100000000, 0x5, 0x0, 0xffffffff, 0x5}, r3, 0x9, r0, 0x8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$BLKGETSIZE64(r10, 0x80081272, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x1d, &(0x7f0000000300)={0x4, 0x4, 0x8000, 0x4, 0x10001}, 0x14) ioctl$TUNSETIFINDEX(r9, 0x400454da, &(0x7f0000000040)=r11) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) 07:04:08 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) getpeername(r0, &(0x7f0000000000)=@ethernet={0x0, @remote}, &(0x7f0000000080)=0x80) r1 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x7fffffff, 0x50440) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000140), 0x1) 07:04:08 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]) gettid() r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r3 = dup(r0) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000340)=r3) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) write$P9_RLOCK(r2, &(0x7f0000000440)={0x8, 0x35, 0x2, 0x4}, 0x8) socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000880)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(r6, 0x400454da, &(0x7f0000000040)=r7) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) [ 627.123082][T28557] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 627.136183][T28557] FAT-fs (loop1): Filesystem has been set read-only [ 627.148239][T28557] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 0) 07:04:08 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]) r3 = gettid() r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r5 = dup(r1) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000340)=r5) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) write$P9_RLOCK(r4, &(0x7f0000000440)={0x8, 0x35, 0x2, 0x4}, 0x8) socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000880)) r8 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x7f) perf_event_open(&(0x7f00000004c0)={0x3, 0x70, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x4, 0x40000, 0x8, 0x7fff, 0x2, 0x8db0, 0x0, 0xb42, 0x2, 0x9, 0xe0, 0x3, 0xa95, 0x200, 0xffffffff, 0x3, 0x84da, 0x4, 0xa7, 0x1, 0xffff, 0x3, 0x3, 0x80000000, 0xffffffffffffff81, 0x3f, 0x8, 0x40, 0x4, 0x5, 0x80, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x7fffffff, 0xb4}, 0x9, 0xc189, 0x100000000, 0x5, 0x0, 0xffffffff, 0x5}, r3, 0x9, r0, 0x8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$BLKGETSIZE64(r10, 0x80081272, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x1d, &(0x7f0000000300)={0x4, 0x4, 0x8000, 0x4, 0x10001}, 0x14) ioctl$TUNSETIFINDEX(r9, 0x400454da, &(0x7f0000000040)=r11) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) [ 627.194428][T28573] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) 07:04:08 executing program 5: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000000)=""/75) getpid() getpgid(0xffffffffffffffff) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000002c0)=0x0) r2 = syz_open_procfs(r1, &(0x7f00000001c0)='mountstats\x00') sendfile(r2, r2, 0x0, 0x3) 07:04:08 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) getpeername(r0, &(0x7f0000000000)=@ethernet={0x0, @remote}, &(0x7f0000000080)=0x80) syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x7fffffff, 0x50440) [ 627.251596][T28573] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 0) [ 627.262798][T28576] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 627.284044][T28576] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 0) [ 627.316578][T28576] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF 07:04:08 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="800000000000000007000000000000000100000000000000050000000000000003000000000000000509ff0100000000000000000000000000000000000000000000000900055eccb76a1b64d4574afe0000000000000000000004000000da2ed9428988bcdf43001f3de2035d0010000000000000000309000600000000000000000000000000000000010000000bbbcb056f0100000082ffffffffffffff090000000000000000097d58030300000000000000000000000000000000000000000000000000000100dc00000000000000010000000000000000000000000000d01e006b022f67706943000000100000000000002000000000000000000000000000000000000000000000000000000000d708000000000000ff78635346d78bb1869a7f00000000000008000000000000008d1109030000000000000000000000000000001800000000000600000000000000000000000000000122008000000000020000ff40020800f548a72876be4edee34b229bce16b900000037164680080c0273819001f18feebdce000000000000000000005bb71592cb0fbf3d0000ffffffffffffffe000000001800000f662639aa068e740ac5bf8de54e52600000000080000000000000009000000000000000800ff7070fa60d4bc295900000000000000000000000000000000000000002046df0bfa99bdc156ff0f21320cecdd061d5f881fa12e7c9e7c0ac904e31be414f8f0c0e41ef2030e490000000087b74cab69466aa32a545918006f46ed488b000000fbc9bdd305d78ee3b103977c5915194291f25e245ce5b261d72885a819fa85b22f2d6bbac581ca73a9dbed54ea1200000000daeeefe15a616c832bcb174b1eb027bbab28591ea3289dd8943cea66587e0a4ad48055a7f5e0724a25e283d09a3b2bbd96b3dc000000000000000000000000000000000000c2b69fae4d6b4cb8ac9a3c2ccb1e5c92b91df55b7ac2e1900b97284ee5ec26c0c24d0500ce1a574eb8c70ee204ea090000005b81ac1f3763e700000000000000000000000000000000000000000000000000000000000000000023635c257fe254ddcd6c6ff3ff4ba238fa2800359ae0ef191befc787bdfb5c4391f9ecf6ebacee6cf43526618f3e0b5569f86c85adf50e52ab05d6f446640e80a255196fa0ef404b3a9a4f419442102099a935cecad84d9e83e23c0ba967dd4a42e478f248ed4cc836ea01f6d3a85a448c"]) r3 = gettid() r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r5 = dup(r1) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000340)=r5) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) write$P9_RLOCK(r4, &(0x7f0000000440)={0x8, 0x35, 0x2, 0x4}, 0x8) socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000880)) r8 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x7f) perf_event_open(&(0x7f00000004c0)={0x3, 0x70, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x4, 0x40000, 0x8, 0x7fff, 0x2, 0x8db0, 0x0, 0xb42, 0x2, 0x9, 0xe0, 0x3, 0xa95, 0x200, 0xffffffff, 0x3, 0x84da, 0x4, 0xa7, 0x1, 0xffff, 0x3, 0x3, 0x80000000, 0xffffffffffffff81, 0x3f, 0x8, 0x40, 0x4, 0x5, 0x80, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x7fffffff, 0xb4}, 0x9, 0xc189, 0x100000000, 0x5, 0x0, 0xffffffff, 0x5}, r3, 0x9, r0, 0x8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$BLKGETSIZE64(r10, 0x80081272, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00'}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x1d, &(0x7f0000000300)={0x4, 0x4, 0x8000, 0x4, 0x10001}, 0x14) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) 07:04:08 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]) gettid() r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r3 = dup(r0) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000340)=r3) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) write$P9_RLOCK(r2, &(0x7f0000000440)={0x8, 0x35, 0x2, 0x4}, 0x8) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(r6, 0x400454da, &(0x7f0000000040)=r7) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) 07:04:08 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = getpid() ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000080)={{0x8}, {0x100, 0x8000}, 0x20, 0x6, 0x7ff}) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:04:08 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) getpeername(r0, &(0x7f0000000000)=@ethernet={0x0, @remote}, &(0x7f0000000080)=0x80) 07:04:08 executing program 5: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000000)=""/75) getpid() getpgid(0xffffffffffffffff) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000002c0)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) 07:04:09 executing program 0: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000180)='sma0\x853|\xbd/\xf4\x83\xab\x1ef\x00\x00\x1a\x0e^\xff\x9f\x00\x00\xb0\v\xff') ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000001c0)=ANY=[@ANYBLOB="07000000000000001f000000000000000100000001040000030000000000004007000000000000000000000000000000010000000000000000000000000000000000000100000000000000000000000000000000000000001f000000000000000000000000000000980100000000000000000000000000000000000000000000800000000000000000000000000000004ea20000000000000200000000000000020000827ad13f9f993c180000000000000000000000000000000000000000000000000000000000"]) r2 = syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x0) ppoll(&(0x7f00000011c0)=[{r2, 0x8000}], 0x1, 0x0, 0x0, 0x0) exit(0x0) sendfile(r1, r1, 0x0, 0x3) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video35\x00', 0x2, 0x0) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x3, 0x400) 07:04:09 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]) gettid() r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r3 = dup(r0) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000340)=r3) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(r6, 0x400454da, &(0x7f0000000040)=r7) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) 07:04:09 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]) r3 = gettid() r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r5 = dup(r1) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000340)=r5) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) write$P9_RLOCK(r4, &(0x7f0000000440)={0x8, 0x35, 0x2, 0x4}, 0x8) socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000880)) r8 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x7f) perf_event_open(&(0x7f00000004c0)={0x3, 0x70, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x4, 0x40000, 0x8, 0x7fff, 0x2, 0x8db0, 0x0, 0xb42, 0x2, 0x9, 0xe0, 0x3, 0xa95, 0x200, 0xffffffff, 0x3, 0x84da, 0x4, 0xa7, 0x1, 0xffff, 0x3, 0x3, 0x80000000, 0xffffffffffffff81, 0x3f, 0x8, 0x40, 0x4, 0x5, 0x80, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x7fffffff, 0xb4}, 0x9, 0xc189, 0x100000000, 0x5, 0x0, 0xffffffff, 0x5}, r3, 0x9, r0, 0x8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$BLKGETSIZE64(r10, 0x80081272, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00'}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x1d, &(0x7f0000000300)={0x4, 0x4, 0x8000, 0x4, 0x10001}, 0x14) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) 07:04:09 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) getpeername(r0, &(0x7f0000000000)=@ethernet={0x0, @remote}, &(0x7f0000000080)=0x80) 07:04:09 executing program 5: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000000)=""/75) getpid() getpgid(0xffffffffffffffff) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000002c0)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) 07:04:09 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getpeername(r0, &(0x7f0000000000)=@ethernet={0x0, @remote}, &(0x7f0000000080)=0x80) 07:04:09 executing program 5: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000000)=""/75) getpid() getpgid(0xffffffffffffffff) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000002c0)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) 07:04:09 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]) r3 = gettid() r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r5 = dup(r1) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000340)=r5) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) write$P9_RLOCK(r4, &(0x7f0000000440)={0x8, 0x35, 0x2, 0x4}, 0x8) socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000880)) r8 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x7f) perf_event_open(&(0x7f00000004c0)={0x3, 0x70, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x4, 0x40000, 0x8, 0x7fff, 0x2, 0x8db0, 0x0, 0xb42, 0x2, 0x9, 0xe0, 0x3, 0xa95, 0x200, 0xffffffff, 0x3, 0x84da, 0x4, 0xa7, 0x1, 0xffff, 0x3, 0x3, 0x80000000, 0xffffffffffffff81, 0x3f, 0x8, 0x40, 0x4, 0x5, 0x80, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x7fffffff, 0xb4}, 0x9, 0xc189, 0x100000000, 0x5, 0x0, 0xffffffff, 0x5}, r3, 0x9, r0, 0x8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$BLKGETSIZE64(r10, 0x80081272, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00'}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x1d, &(0x7f0000000300)={0x4, 0x4, 0x8000, 0x4, 0x10001}, 0x14) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) 07:04:09 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]) gettid() r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r3 = dup(r0) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000340)=r3) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(r5, 0x400454da, &(0x7f0000000040)=r6) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) 07:04:09 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x5) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="68795e9bb20514a3a468223fe5a3e57fb38368b2782fa40c4c2d2352bf6452619797d699da4852e9157cf8f1ce8b4538"], 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000880)={0x0, 0x1000, "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"}, &(0x7f00000000c0)=0x1008) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000001c0)={r3, 0x5, 0x6, 0xfffffffffffffffe, 0x100000001, 0x9}, &(0x7f0000000240)=0x14) creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000280)=0x8) 07:04:09 executing program 5: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000000)=""/75) getpid() getpgid(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountstats\x00') sendfile(r1, r1, 0x0, 0x3) 07:04:09 executing program 2: getpeername(0xffffffffffffffff, &(0x7f0000000000)=@ethernet={0x0, @remote}, &(0x7f0000000080)=0x80) [ 628.890178][T28632] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 628.905696][T28632] FAT-fs (loop1): Filesystem has been set read-only [ 628.918335][T28632] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) 07:04:10 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') sendfile(r0, r0, &(0x7f0000000000), 0x9) exit(0x0) sendfile(r0, r0, 0x0, 0x3) 07:04:10 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]) gettid() r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r3 = dup(r0) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000340)=r3) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(r5, 0x400454da, &(0x7f0000000040)=r6) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) 07:04:10 executing program 5: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000000)=""/75) getpid() r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountstats\x00') sendfile(r1, r1, 0x0, 0x3) 07:04:10 executing program 2: getpeername(0xffffffffffffffff, &(0x7f0000000000)=@ethernet={0x0, @remote}, &(0x7f0000000080)=0x80) 07:04:10 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]) r3 = gettid() r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r5 = dup(r1) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000340)=r5) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) write$P9_RLOCK(r4, &(0x7f0000000440)={0x8, 0x35, 0x2, 0x4}, 0x8) socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000880)) r8 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x7f) perf_event_open(&(0x7f00000004c0)={0x3, 0x70, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x4, 0x40000, 0x8, 0x7fff, 0x2, 0x8db0, 0x0, 0xb42, 0x2, 0x9, 0xe0, 0x3, 0xa95, 0x200, 0xffffffff, 0x3, 0x84da, 0x4, 0xa7, 0x1, 0xffff, 0x3, 0x3, 0x80000000, 0xffffffffffffff81, 0x3f, 0x8, 0x40, 0x4, 0x5, 0x80, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x7fffffff, 0xb4}, 0x9, 0xc189, 0x100000000, 0x5, 0x0, 0xffffffff, 0x5}, r3, 0x9, r0, 0x8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$BLKGETSIZE64(r10, 0x80081272, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(r9, 0x400454da, &(0x7f0000000040)=r11) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) 07:04:10 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="000000008100"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) mq_getsetattr(r0, &(0x7f0000000080)={0x10000, 0xfffffffffffffffa, 0xf9d, 0x9, 0xf6b7, 0x200, 0xffffffffffffffe8, 0x7ff}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:04:10 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]) r3 = gettid() r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r5 = dup(r1) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000340)=r5) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) write$P9_RLOCK(r4, &(0x7f0000000440)={0x8, 0x35, 0x2, 0x4}, 0x8) socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000880)) r8 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x7f) perf_event_open(&(0x7f00000004c0)={0x3, 0x70, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x4, 0x40000, 0x8, 0x7fff, 0x2, 0x8db0, 0x0, 0xb42, 0x2, 0x9, 0xe0, 0x3, 0xa95, 0x200, 0xffffffff, 0x3, 0x84da, 0x4, 0xa7, 0x1, 0xffff, 0x3, 0x3, 0x80000000, 0xffffffffffffff81, 0x3f, 0x8, 0x40, 0x4, 0x5, 0x80, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x7fffffff, 0xb4}, 0x9, 0xc189, 0x100000000, 0x5, 0x0, 0xffffffff, 0x5}, r3, 0x9, r0, 0x8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$BLKGETSIZE64(r10, 0x80081272, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(r9, 0x400454da, &(0x7f0000000040)=r11) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) 07:04:10 executing program 5: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000000)=""/75) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountstats\x00') sendfile(r1, r1, 0x0, 0x3) 07:04:10 executing program 2: getpeername(0xffffffffffffffff, &(0x7f0000000000)=@ethernet={0x0, @remote}, &(0x7f0000000080)=0x80) 07:04:10 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]) gettid() r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r3 = dup(r0) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000340)=r3) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(r5, 0x400454da, &(0x7f0000000040)=r6) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) 07:04:10 executing program 5: dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountstats\x00') sendfile(r0, r0, 0x0, 0x3) 07:04:10 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getpeername(r0, &(0x7f0000000000)=@ethernet={0x0, @remote}, &(0x7f0000000080)=0x80) [ 630.110959][ C1] net_ratelimit: 21 callbacks suppressed [ 630.110968][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 630.111002][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 630.116687][ C1] protocol 88fb is buggy, dev hsr_slave_1 07:04:11 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') exit(0x400000000083f) sendfile(r0, r0, 0x0, 0x3) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={0x0, 0xb2}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0xffffffffffff0001, 0x9, 0x4, 0x2, 0x8, 0x5, 0x9, 0x2127, r1}, &(0x7f0000000140)=0x20) 07:04:11 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]) r3 = gettid() r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r5 = dup(r1) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000340)=r5) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) write$P9_RLOCK(r4, &(0x7f0000000440)={0x8, 0x35, 0x2, 0x4}, 0x8) socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000880)) r8 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x7f) perf_event_open(&(0x7f00000004c0)={0x3, 0x70, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x4, 0x40000, 0x8, 0x7fff, 0x2, 0x8db0, 0x0, 0xb42, 0x2, 0x9, 0xe0, 0x3, 0xa95, 0x200, 0xffffffff, 0x3, 0x84da, 0x4, 0xa7, 0x1, 0xffff, 0x3, 0x3, 0x80000000, 0xffffffffffffff81, 0x3f, 0x8, 0x40, 0x4, 0x5, 0x80, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x7fffffff, 0xb4}, 0x9, 0xc189, 0x100000000, 0x5, 0x0, 0xffffffff, 0x5}, r3, 0x9, r0, 0x8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$BLKGETSIZE64(r10, 0x80081272, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(r9, 0x400454da, &(0x7f0000000040)=r11) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) 07:04:11 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]) gettid() r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r3 = dup(r0) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000340)=r3) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(r6, 0x400454da, &(0x7f0000000040)=r7) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) 07:04:11 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getpeername(r0, &(0x7f0000000000)=@ethernet={0x0, @remote}, &(0x7f0000000080)=0x80) 07:04:11 executing program 5: dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountstats\x00') sendfile(r0, r0, 0x0, 0x3) 07:04:11 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) accept4(r0, &(0x7f0000000240)=@hci, &(0x7f00000000c0)=0x80, 0x800) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080), 0x8) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:04:11 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="800000000000000007000000000000000100000000000000050000000000000003000000000000000509ff0100000000000000000000000000000000000000000000000900055eccb76a1b64d4574afe0000000000000000000004000000da2ed9428988bcdf43001f3de2035d0010000000000000000309000600000000000000000000000000000000010000000bbbcb056f0100000082ffffffffffffff090000000000000000097d58030300000000000000000000000000000000000000000000000000000100dc00000000000000010000000000000000000000000000d01e006b022f67706943000000100000000000002000000000000000000000000000000000000000000000000000000000d708000000000000ff78635346d78bb1869a7f00000000000008000000000000008d1109030000000000000000000000000000001800000000000600000000000000000000000000000122008000000000020000ff40020800f548a72876be4edee34b229bce16b900000037164680080c0273819001f18feebdce000000000000000000005bb71592cb0fbf3d0000ffffffffffffffe000000001800000f662639aa068e740ac5bf8de54e52600000000080000000000000009000000000000000800ff7070fa60d4bc295900000000000000000000000000000000000000002046df0bfa99bdc156ff0f21320cecdd061d5f881fa12e7c9e7c0ac904e31be414f8f0c0e41ef2030e490000000087b74cab69466aa32a545918006f46ed488b000000fbc9bdd305d78ee3b103977c5915194291f25e245ce5b261d72885a819fa85b22f2d6bbac581ca73a9dbed54ea1200000000daeeefe15a616c832bcb174b1eb027bbab28591ea3289dd8943cea66587e0a4ad48055a7f5e0724a25e283d09a3b2bbd96b3dc000000000000000000000000000000000000c2b69fae4d6b4cb8ac9a3c2ccb1e5c92b91df55b7ac2e1900b97284ee5ec26c0c24d0500ce1a574eb8c70ee204ea090000005b81ac1f3763e700000000000000000000000000000000000000000000000000000000000000000023635c257fe254ddcd6c6ff3ff4ba238fa2800359ae0ef191befc787bdfb5c4391f9ecf6ebacee6cf43526618f3e0b5569f86c85adf50e52ab05d6f446640e80a255196fa0ef404b3a9a4f419442102099a935cecad84d9e83e23c0ba967dd4a42e478f248ed4cc836ea01f6d3a85a448c"]) gettid() r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r3 = dup(r0) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000340)=r3) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0xfffffffffffffffd) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(r6, 0x400454da, &(0x7f0000000040)=r7) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) 07:04:11 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountstats\x00') sendfile(r0, r0, 0x0, 0x3) 07:04:11 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]) r3 = gettid() r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r5 = dup(r1) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000340)=r5) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) socket$inet6(0xa, 0x2, 0x0) write$P9_RLOCK(r4, &(0x7f0000000440)={0x8, 0x35, 0x2, 0x4}, 0x8) socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000880)) r7 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x7f) perf_event_open(&(0x7f00000004c0)={0x3, 0x70, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x4, 0x40000, 0x8, 0x7fff, 0x2, 0x8db0, 0x0, 0xb42, 0x2, 0x9, 0xe0, 0x3, 0xa95, 0x200, 0xffffffff, 0x3, 0x84da, 0x4, 0xa7, 0x1, 0xffff, 0x3, 0x3, 0x80000000, 0xffffffffffffff81, 0x3f, 0x8, 0x40, 0x4, 0x5, 0x80, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x7fffffff, 0xb4}, 0x9, 0xc189, 0x100000000, 0x5, 0x0, 0xffffffff, 0x5}, r3, 0x9, r0, 0x8) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$BLKGETSIZE64(r9, 0x80081272, &(0x7f0000000140)) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, &(0x7f0000000300)={0x4, 0x4, 0x8000, 0x4, 0x10001}, 0x14) ioctl$TUNSETIFINDEX(r8, 0x400454da, &(0x7f0000000040)) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) 07:04:11 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getpeername(r0, &(0x7f0000000000)=@ethernet={0x0, @remote}, &(0x7f0000000080)=0x80) 07:04:11 executing program 5: r0 = syz_open_procfs(0x0, 0x0) sendfile(r0, r0, 0x0, 0x3) 07:04:11 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000000)=@ethernet={0x0, @remote}, &(0x7f0000000080)=0x80) [ 630.991419][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 630.997733][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 631.004436][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 631.010644][ C0] protocol 88fb is buggy, dev hsr_slave_1 07:04:12 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0x65, "ce1d6ce79defc4689689e4d030aa2d42074a2edb69eecda7decc720fec058bbc246ad3bf985c23febf52787d47546c849fa7d5c80981a8ff14751f37ec45947001b7a2df33071d04500d9f0f01b1e7b5274da7e3b2d7ff47b75fdd287d1d2d212589386973"}, &(0x7f00000000c0)=0x6d) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000100)=r1, 0x4) exit(0x0) sendfile(r0, r0, 0x0, 0x3) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000140)={0x29}) 07:04:12 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]) gettid() r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r3 = dup(r0) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000340)=r3) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(r5, 0x400454da, &(0x7f0000000040)=r6) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) 07:04:12 executing program 5: r0 = syz_open_procfs(0x0, 0x0) sendfile(r0, r0, 0x0, 0x3) 07:04:12 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]) r3 = gettid() r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r5 = dup(r1) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000340)=r5) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) socket$inet6(0xa, 0x2, 0x0) write$P9_RLOCK(r4, &(0x7f0000000440)={0x8, 0x35, 0x2, 0x4}, 0x8) socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000880)) r7 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x7f) perf_event_open(&(0x7f00000004c0)={0x3, 0x70, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x4, 0x40000, 0x8, 0x7fff, 0x2, 0x8db0, 0x0, 0xb42, 0x2, 0x9, 0xe0, 0x3, 0xa95, 0x200, 0xffffffff, 0x3, 0x84da, 0x4, 0xa7, 0x1, 0xffff, 0x3, 0x3, 0x80000000, 0xffffffffffffff81, 0x3f, 0x8, 0x40, 0x4, 0x5, 0x80, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x7fffffff, 0xb4}, 0x9, 0xc189, 0x100000000, 0x5, 0x0, 0xffffffff, 0x5}, r3, 0x9, r0, 0x8) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$BLKGETSIZE64(r9, 0x80081272, &(0x7f0000000140)) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, &(0x7f0000000300)={0x4, 0x4, 0x8000, 0x4, 0x10001}, 0x14) ioctl$TUNSETIFINDEX(r8, 0x400454da, &(0x7f0000000040)) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) 07:04:12 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000000)=@ethernet={0x0, @remote}, &(0x7f0000000080)=0x80) 07:04:12 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x36, 0x8080fffffffe) r2 = getpid() openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x389042, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:04:12 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000000)=@ethernet={0x0, @remote}, &(0x7f0000000080)=0x80) 07:04:12 executing program 5: r0 = syz_open_procfs(0x0, 0x0) sendfile(r0, r0, 0x0, 0x3) 07:04:12 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]) gettid() r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r3 = dup(r0) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000340)=r3) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(r5, 0x400454da, &(0x7f0000000040)=r6) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) 07:04:12 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]) r3 = gettid() r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r5 = dup(r1) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000340)=r5) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) socket$inet6(0xa, 0x2, 0x0) write$P9_RLOCK(r4, &(0x7f0000000440)={0x8, 0x35, 0x2, 0x4}, 0x8) socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000880)) r7 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x7f) perf_event_open(&(0x7f00000004c0)={0x3, 0x70, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x4, 0x40000, 0x8, 0x7fff, 0x2, 0x8db0, 0x0, 0xb42, 0x2, 0x9, 0xe0, 0x3, 0xa95, 0x200, 0xffffffff, 0x3, 0x84da, 0x4, 0xa7, 0x1, 0xffff, 0x3, 0x3, 0x80000000, 0xffffffffffffff81, 0x3f, 0x8, 0x40, 0x4, 0x5, 0x80, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x7fffffff, 0xb4}, 0x9, 0xc189, 0x100000000, 0x5, 0x0, 0xffffffff, 0x5}, r3, 0x9, r0, 0x8) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$BLKGETSIZE64(r9, 0x80081272, &(0x7f0000000140)) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, &(0x7f0000000300)={0x4, 0x4, 0x8000, 0x4, 0x10001}, 0x14) ioctl$TUNSETIFINDEX(r8, 0x400454da, &(0x7f0000000040)) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) 07:04:12 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000080)) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="193ef37f9514e701758da872c1dfc7aa0b0500000000000000a9eedc3f90fde213420b83ea107ef6cc7d56502f6ece74ec0724e77efc6f22285ed35835f2feadd301bd5412ac"], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:04:12 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountstats\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x3) [ 631.550910][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 631.556887][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 631.713977][T28736] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 631.729998][T28736] FAT-fs (loop1): Filesystem has been set read-only [ 631.738899][T28736] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 631.790937][ C1] protocol 88fb is buggy, dev hsr_slave_0 07:04:13 executing program 0: 07:04:13 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getpeername(r0, 0x0, &(0x7f0000000080)) 07:04:13 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]) gettid() r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r3 = dup(r0) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000340)=r3) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(r5, 0x400454da, &(0x7f0000000040)=r6) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) 07:04:13 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountstats\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x3) 07:04:13 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]) r3 = gettid() r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r5 = dup(r1) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000340)=r5) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) write$P9_RLOCK(r4, &(0x7f0000000440)={0x8, 0x35, 0x2, 0x4}, 0x8) socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000880)) r8 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x7f) perf_event_open(&(0x7f00000004c0)={0x3, 0x70, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x4, 0x40000, 0x8, 0x7fff, 0x2, 0x8db0, 0x0, 0xb42, 0x2, 0x9, 0xe0, 0x3, 0xa95, 0x200, 0xffffffff, 0x3, 0x84da, 0x4, 0xa7, 0x1, 0xffff, 0x3, 0x3, 0x80000000, 0xffffffffffffff81, 0x3f, 0x8, 0x40, 0x4, 0x5, 0x80, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x7fffffff, 0xb4}, 0x9, 0xc189, 0x100000000, 0x5, 0x0, 0xffffffff, 0x5}, r3, 0x9, r0, 0x8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x1d, &(0x7f0000000300)={0x4, 0x4, 0x8000, 0x4, 0x10001}, 0x14) ioctl$TUNSETIFINDEX(r9, 0x400454da, &(0x7f0000000040)=r11) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) 07:04:13 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) open(&(0x7f0000000080)='./file1\x00', 0x82000, 0x102) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:04:13 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getpeername(r0, 0x0, 0x0) 07:04:13 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountstats\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x3) 07:04:13 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f00000009c0)=0x1f, 0x4) sendmmsg(r0, &(0x7f0000008a80)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000005c0)={0x0, 'vlan0\x00'}, 0x18) 07:04:13 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]) gettid() r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r3 = dup(r0) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000340)=r3) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(r5, 0x400454da, &(0x7f0000000040)=r6) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) 07:04:13 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]) r3 = gettid() r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r5 = dup(r1) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000340)=r5) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) write$P9_RLOCK(r4, &(0x7f0000000440)={0x8, 0x35, 0x2, 0x4}, 0x8) socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000880)) r8 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x7f) perf_event_open(&(0x7f00000004c0)={0x3, 0x70, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x4, 0x40000, 0x8, 0x7fff, 0x2, 0x8db0, 0x0, 0xb42, 0x2, 0x9, 0xe0, 0x3, 0xa95, 0x200, 0xffffffff, 0x3, 0x84da, 0x4, 0xa7, 0x1, 0xffff, 0x3, 0x3, 0x80000000, 0xffffffffffffff81, 0x3f, 0x8, 0x40, 0x4, 0x5, 0x80, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x7fffffff, 0xb4}, 0x9, 0xc189, 0x100000000, 0x5, 0x0, 0xffffffff, 0x5}, r3, 0x9, r0, 0x8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x1d, &(0x7f0000000300)={0x4, 0x4, 0x8000, 0x4, 0x10001}, 0x14) ioctl$TUNSETIFINDEX(r9, 0x400454da, &(0x7f0000000040)=r11) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) 07:04:13 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountstats\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x3) 07:04:13 executing program 2: r0 = socket$inet6(0xa, 0x80803, 0x30) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@loopback, @in6=@ipv4={[], [], @initdev}, 0x0, 0x0, 0x0, 0x0, 0x80000002}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x4d4, 0x33}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}, 0xe8) connect$inet6(r0, &(0x7f0000000040), 0x1c) 07:04:13 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="6368616e676568617420307830303030303030303030303030300600000000000000765d76626f786e65743184245c007065726d686174205d7365637572697479626465764047504c65746830706f7369785f61636c5f6163636573735b2e2629007573657200ebe1a8564f1e"], 0x1) 07:04:13 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]) gettid() openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) dup(r0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000040)=r4) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) 07:04:13 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountstats\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x3) 07:04:13 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]) r3 = gettid() r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r5 = dup(r1) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000340)=r5) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) write$P9_RLOCK(r4, &(0x7f0000000440)={0x8, 0x35, 0x2, 0x4}, 0x8) socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000880)) r8 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x7f) perf_event_open(&(0x7f00000004c0)={0x3, 0x70, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x4, 0x40000, 0x8, 0x7fff, 0x2, 0x8db0, 0x0, 0xb42, 0x2, 0x9, 0xe0, 0x3, 0xa95, 0x200, 0xffffffff, 0x3, 0x84da, 0x4, 0xa7, 0x1, 0xffff, 0x3, 0x3, 0x80000000, 0xffffffffffffff81, 0x3f, 0x8, 0x40, 0x4, 0x5, 0x80, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x7fffffff, 0xb4}, 0x9, 0xc189, 0x100000000, 0x5, 0x0, 0xffffffff, 0x5}, r3, 0x9, r0, 0x8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x1d, &(0x7f0000000300)={0x4, 0x4, 0x8000, 0x4, 0x10001}, 0x14) ioctl$TUNSETIFINDEX(r9, 0x400454da, &(0x7f0000000040)=r11) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) [ 632.717111][T28750] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 632.725705][T28750] FAT-fs (loop1): Filesystem has been set read-only [ 632.740208][T28750] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) 07:04:13 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x400, 0x5e) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:04:13 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountstats\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x3) 07:04:13 executing program 2: clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 07:04:13 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) inotify_init() clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 07:04:13 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]) gettid() openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000040)=r4) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) 07:04:13 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]) r3 = gettid() r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r5 = dup(r1) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000340)=r5) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) write$P9_RLOCK(r4, &(0x7f0000000440)={0x8, 0x35, 0x2, 0x4}, 0x8) socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000880)) r8 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x7f) perf_event_open(&(0x7f00000004c0)={0x3, 0x70, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x4, 0x40000, 0x8, 0x7fff, 0x2, 0x8db0, 0x0, 0xb42, 0x2, 0x9, 0xe0, 0x3, 0xa95, 0x200, 0xffffffff, 0x3, 0x84da, 0x4, 0xa7, 0x1, 0xffff, 0x3, 0x3, 0x80000000, 0xffffffffffffff81, 0x3f, 0x8, 0x40, 0x4, 0x5, 0x80, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x7fffffff, 0xb4}, 0x9, 0xc189, 0x100000000, 0x5, 0x0, 0xffffffff, 0x5}, r3, 0x9, r0, 0x8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000300)={0x4, 0x4, 0x8000, 0x4, 0x10001}, 0x14) ioctl$TUNSETIFINDEX(r9, 0x400454da, &(0x7f0000000040)=r10) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) [ 632.888927][T28790] IPVS: ftp: loaded support on port[0] = 21 07:04:14 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountstats\x00') sendfile(r0, r0, 0x0, 0x0) 07:04:14 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountstats\x00') sendfile(r0, r0, 0x0, 0x0) 07:04:14 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountstats\x00') sendfile(r0, r0, 0x0, 0x0) 07:04:14 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 07:04:14 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0xffffff09) fallocate(r1, 0x3, 0x0, 0xfffe) [ 633.686544][T28813] IPVS: ftp: loaded support on port[0] = 21 07:04:14 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]) r3 = gettid() r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r5 = dup(r1) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000340)=r5) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) write$P9_RLOCK(r4, &(0x7f0000000440)={0x8, 0x35, 0x2, 0x4}, 0x8) socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000880)) r8 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x7f) perf_event_open(&(0x7f00000004c0)={0x3, 0x70, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x4, 0x40000, 0x8, 0x7fff, 0x2, 0x8db0, 0x0, 0xb42, 0x2, 0x9, 0xe0, 0x3, 0xa95, 0x200, 0xffffffff, 0x3, 0x84da, 0x4, 0xa7, 0x1, 0xffff, 0x3, 0x3, 0x80000000, 0xffffffffffffff81, 0x3f, 0x8, 0x40, 0x4, 0x5, 0x80, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x7fffffff, 0xb4}, 0x9, 0xc189, 0x100000000, 0x5, 0x0, 0xffffffff, 0x5}, r3, 0x9, r0, 0x8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000300)={0x4, 0x4, 0x8000, 0x4, 0x10001}, 0x14) ioctl$TUNSETIFINDEX(r9, 0x400454da, &(0x7f0000000040)=r10) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) 07:04:15 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = fcntl$getown(r0, 0x9) sched_rr_get_interval(r2, &(0x7f0000000080)) r3 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r3, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="1fd724a39aa9f508c7907f6a1496e086af7eb6b085a49ce289f1173baf34880e1be138"], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:04:15 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]) gettid() r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000040)=r4) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) [ 634.515379][T28829] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 634.533433][T28829] FAT-fs (loop1): Filesystem has been set read-only [ 634.548440][T28829] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 635.150918][ C0] net_ratelimit: 17 callbacks suppressed [ 635.150928][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 635.162431][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 635.168241][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 635.174034][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 635.710940][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 635.720417][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 635.951010][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 635.956829][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 636.350992][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 636.351042][ C1] protocol 88fb is buggy, dev hsr_slave_1 07:04:19 executing program 2: syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x2c, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 07:04:19 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) unshare(0x8000400) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000400)=""/246) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x4004743d, &(0x7f0000000800)=""/246) 07:04:19 executing program 0: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x103c, 0x0) execve(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r0 = gettid() clone(0x2100001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, 0x0) 07:04:19 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="800000000000000007000000000000000100000000000000050000000000000003000000000000000509ff0100000000000000000000000000000000000000000000000900055eccb76a1b64d4574afe0000000000000000000004000000da2ed9428988bcdf43001f3de2035d0010000000000000000309000600000000000000000000000000000000010000000bbbcb056f0100000082ffffffffffffff090000000000000000097d58030300000000000000000000000000000000000000000000000000000100dc00000000000000010000000000000000000000000000d01e006b022f67706943000000100000000000002000000000000000000000000000000000000000000000000000000000d708000000000000ff78635346d78bb1869a7f00000000000008000000000000008d1109030000000000000000000000000000001800000000000600000000000000000000000000000122008000000000020000ff40020800f548a72876be4edee34b229bce16b900000037164680080c0273819001f18feebdce000000000000000000005bb71592cb0fbf3d0000ffffffffffffffe000000001800000f662639aa068e740ac5bf8de54e52600000000080000000000000009000000000000000800ff7070fa60d4bc295900000000000000000000000000000000000000002046df0bfa99bdc156ff0f21320cecdd061d5f881fa12e7c9e7c0ac904e31be414f8f0c0e41ef2030e490000000087b74cab69466aa32a545918006f46ed488b000000fbc9bdd305d78ee3b103977c5915194291f25e245ce5b261d72885a819fa85b22f2d6bbac581ca73a9dbed54ea1200000000daeeefe15a616c832bcb174b1eb027bbab28591ea3289dd8943cea66587e0a4ad48055a7f5e0724a25e283d09a3b2bbd96b3dc000000000000000000000000000000000000c2b69fae4d6b4cb8ac9a3c2ccb1e5c92b91df55b7ac2e1900b97284ee5ec26c0c24d0500ce1a574eb8c70ee204ea090000005b81ac1f3763e700000000000000000000000000000000000000000000000000000000000000000023635c257fe254ddcd6c6ff3ff4ba238fa2800359ae0ef191befc787bdfb5c4391f9ecf6ebacee6cf43526618f3e0b5569f86c85adf50e52ab05d6f446640e80a255196fa0ef404b3a9a4f419442102099a935cecad84d9e83e23c0ba967dd4a42e478f248ed4cc836ea01f6d3a85a448c"]) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000040)=r4) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) 07:04:19 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]) r3 = gettid() r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r5 = dup(r1) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000340)=r5) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) write$P9_RLOCK(r4, &(0x7f0000000440)={0x8, 0x35, 0x2, 0x4}, 0x8) socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000880)) r8 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x7f) perf_event_open(&(0x7f00000004c0)={0x3, 0x70, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x4, 0x40000, 0x8, 0x7fff, 0x2, 0x8db0, 0x0, 0xb42, 0x2, 0x9, 0xe0, 0x3, 0xa95, 0x200, 0xffffffff, 0x3, 0x84da, 0x4, 0xa7, 0x1, 0xffff, 0x3, 0x3, 0x80000000, 0xffffffffffffff81, 0x3f, 0x8, 0x40, 0x4, 0x5, 0x80, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x7fffffff, 0xb4}, 0x9, 0xc189, 0x100000000, 0x5, 0x0, 0xffffffff, 0x5}, r3, 0x9, r0, 0x8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000300)={0x4, 0x4, 0x8000, 0x4, 0x10001}, 0x14) ioctl$TUNSETIFINDEX(r9, 0x400454da, &(0x7f0000000040)=r10) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) 07:04:19 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="002000108208"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') accept$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000300)={{{@in=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000400)=0xe8) clock_gettime(0x0, &(0x7f0000007d40)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000007b80)=[{{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f00000007c0)=""/35, 0x23}, {&(0x7f0000000b00)=""/255, 0xff}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/237, 0xed}, {&(0x7f0000001d00)=""/114, 0x72}, {&(0x7f0000001d80)=""/14, 0xe}, {&(0x7f0000001e40)=""/4096, 0x1000}, {&(0x7f0000002e40)=""/168, 0xa8}], 0x8, &(0x7f0000002f80)=""/155, 0x9b}, 0x5}, {{&(0x7f0000003040)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000004400)=[{&(0x7f00000030c0)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/16, 0x10}, {&(0x7f00000040c0)=""/135, 0x87}, {&(0x7f0000004180)=""/151, 0x97}, {&(0x7f0000004240)=""/218, 0xda}, {&(0x7f0000004340)=""/175, 0xaf}], 0x6, &(0x7f0000004480)=""/147, 0x93}, 0x7ff}, {{0x0, 0x0, &(0x7f0000005a00)=[{&(0x7f0000004540)=""/87, 0x57}, {&(0x7f00000045c0)=""/244, 0xf4}, {&(0x7f00000046c0)=""/4096, 0x1000}, {&(0x7f00000056c0)=""/32, 0x20}, {&(0x7f0000005700)=""/89, 0x59}, {&(0x7f0000005780)=""/129, 0x81}, {&(0x7f0000005840)=""/131, 0x83}, {&(0x7f0000005900)=""/51, 0x33}, {&(0x7f0000005940)=""/8, 0x8}, {&(0x7f0000005980)=""/84, 0x54}], 0xa}, 0xffff}, {{0x0, 0x0, &(0x7f0000005c00)=[{&(0x7f0000005ac0)=""/226, 0xe2}, {&(0x7f0000005bc0)=""/63, 0x3f}], 0x2}}, {{&(0x7f0000005c40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000006280)=[{&(0x7f0000005cc0)=""/164, 0xa4}, {&(0x7f0000005d80)=""/95, 0x5f}, {&(0x7f0000005e00)=""/5, 0x5}, {&(0x7f0000005e40)=""/117, 0x75}, {&(0x7f0000005ec0)=""/231, 0xe7}, {&(0x7f0000005fc0)=""/157, 0x9d}, {&(0x7f0000006080)=""/62, 0x3e}, {&(0x7f00000060c0)=""/238, 0xee}, {&(0x7f00000061c0)=""/57, 0x39}, {&(0x7f0000006200)=""/105, 0x69}], 0xa, &(0x7f0000006340)=""/192, 0xc0}, 0x3}, {{&(0x7f0000006400)=@hci={0x1f, 0x0}, 0x80, &(0x7f00000066c0)=[{&(0x7f0000006480)=""/184, 0xb8}, {&(0x7f0000006540)=""/121, 0x79}, {&(0x7f00000065c0)=""/247, 0xf7}], 0x3, &(0x7f0000006700)=""/78, 0x4e}, 0x1}, {{&(0x7f0000006780)=@tipc=@id, 0x80, &(0x7f0000007b00)=[{&(0x7f0000006800)=""/226, 0xe2}, {&(0x7f0000006900)=""/25, 0x19}, {&(0x7f0000006940)=""/4096, 0x1000}, {&(0x7f0000007940)=""/57, 0x39}, {&(0x7f0000007980)=""/185, 0xb9}, {&(0x7f0000007a40)=""/116, 0x74}, {&(0x7f0000007ac0)=""/22, 0x16}], 0x7}, 0x101}], 0x7, 0x10022, &(0x7f0000007d80)={r6, r7+30000000}) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f000000a480)={@initdev, @broadcast, 0x0}, &(0x7f000000a4c0)=0xc) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f000000a500)={@ipv4={[], [], @initdev}, 0x0}, &(0x7f000000a540)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f000000a580)={'vcan0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f000000a5c0)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}}}, &(0x7f000000a6c0)=0xe8) getpeername$packet(r1, &(0x7f000000db80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f000000dbc0)=0x14) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f000000de00)={@multicast2, @multicast2, 0x0}, &(0x7f000000de40)=0xc) recvmmsg(r0, &(0x7f0000016f40)=[{{&(0x7f0000015600)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000015700)=[{&(0x7f0000015680)=""/121, 0x79}], 0x1, &(0x7f0000015740)=""/154, 0x9a}, 0x6}, {{&(0x7f0000015800)=@nl=@proc, 0x80, &(0x7f0000016c00)=[{&(0x7f0000015880)=""/18, 0x12}, {&(0x7f00000158c0)=""/106, 0x6a}, {&(0x7f0000015940)=""/4096, 0x1000}, {&(0x7f0000016940)=""/114, 0x72}, {&(0x7f00000169c0)=""/177, 0xb1}, {&(0x7f0000016a80)=""/18, 0x12}, {&(0x7f0000016ac0)=""/33, 0x21}, {&(0x7f0000016b00)=""/24, 0x18}, {&(0x7f0000016b40)=""/156, 0x9c}], 0x9, &(0x7f0000016cc0)=""/224, 0xe0}, 0x839}, {{&(0x7f0000016dc0)=@nfc_llcp, 0x80, &(0x7f0000016ec0)=[{&(0x7f0000016e40)=""/114, 0x72}], 0x1, &(0x7f0000016f00)=""/31, 0x1f}, 0x8}], 0x3, 0x0, &(0x7f0000017000)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000170c0)={{{@in6=@ipv4={[], [], @remote}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@initdev}}, &(0x7f00000171c0)=0xe8) getpeername(r0, &(0x7f0000017200)=@hci={0x1f, 0x0}, &(0x7f0000017280)=0x80) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000172c0)={{{@in6=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f00000173c0)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000017b80)={'yam0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000017bc0)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000017c00)={{{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000017d00)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000017d40)={'team0\x00', 0x0}) recvmmsg(r1, &(0x7f000001f040)=[{{&(0x7f000001ad80)=@isdn, 0x80, &(0x7f000001be80)=[{&(0x7f000001ae00)=""/4096, 0x1000}, {&(0x7f000001be00)=""/75, 0x4b}], 0x2}}, {{&(0x7f000001bec0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f000001e000)=[{&(0x7f000001bf40)=""/173, 0xad}, {&(0x7f000001c000)=""/4096, 0x1000}, {&(0x7f000001d000)=""/4096, 0x1000}], 0x3, &(0x7f000001e040)=""/4096, 0x1000}, 0x7}], 0x2, 0x40000000, 0x0) getsockname$packet(r0, &(0x7f000001f0c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f000001f100)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f000001f140)={'vcan0\x00', 0x0}) getpeername$packet(r0, &(0x7f000001f180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f000001f1c0)=0x14) accept4$packet(r0, &(0x7f000001f200)={0x11, 0x0, 0x0}, &(0x7f000001f240)=0x14, 0x80800) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000001f280)={'veth1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000001f400)={'veth1_to_hsr\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f000001f440)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f000001f480)={'vcan0\x00', 0x0}) getpeername$packet(r0, &(0x7f000001f4c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f000001f500)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f000001f540)={{{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f000001f640)=0xe8) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000020140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000020}, 0xc, &(0x7f0000020100)={&(0x7f000001f680)={0xa44, r3, 0x0, 0x70bd28, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x214, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x100}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xfff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xe827}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x168, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r9}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r10}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r13}, {0x78, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r14}}}]}}, {{0x8, 0x1, r15}, {0x1b0, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r17}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r19}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0xffffffffffffffc0, 0x4, 0x5, 0x8}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x1e}}, {0x8, 0x6, r20}}}]}}, {{0x8, 0x1, r21}, {0x40, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r22}}}]}}, {{0x8, 0x1, r23}, {0x228, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r24}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r25}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r26}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r27}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r28}}}]}}, {{0x8, 0x1, r29}, {0x1ec, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x1f}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r30}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x7b28e128}}, {0x8, 0x6, r31}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r32}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x31445792}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x0, 0x9, 0x3, 0x200}, {0x3, 0x400, 0x9, 0xfffffffffffffff7}]}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r33}}}]}}]}, 0xa44}}, 0x40000) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) [ 638.369031][T28842] [ 638.371400][T28842] ====================================================== [ 638.378426][T28842] WARNING: possible circular locking dependency detected [ 638.385453][T28842] 5.1.0-rc1-next-20190321 #8 Not tainted [ 638.391072][T28842] ------------------------------------------------------ [ 638.398088][T28842] syz-executor.0/28842 is trying to acquire lock: [ 638.402344][ T3877] kobject: 'loop4' (000000005d7c360e): kobject_uevent_env [ 638.404513][T28842] 00000000a6e673a6 (&pipe->mutex/1){+.+.}, at: fifo_open+0x159/0xb00 [ 638.419692][T28842] [ 638.419692][T28842] but task is already holding lock: [ 638.423351][ T3877] kobject: 'loop4' (000000005d7c360e): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 638.427051][T28842] 000000009eea7565 (&sig->cred_guard_mutex){+.+.}, at: __do_execve_file.isra.0+0x376/0x23f0 [ 638.427089][T28842] [ 638.427089][T28842] which lock already depends on the new lock. [ 638.427089][T28842] [ 638.457654][T28842] [ 638.457654][T28842] the existing dependency chain (in reverse order) is: [ 638.466664][T28842] [ 638.466664][T28842] -> #2 (&sig->cred_guard_mutex){+.+.}: [ 638.474392][T28842] lock_acquire+0x16f/0x3f0 [ 638.479415][T28842] __mutex_lock+0xf7/0x1310 [ 638.484448][T28842] mutex_lock_killable_nested+0x16/0x20 [ 638.490517][T28842] lock_trace+0x4a/0xe0 [ 638.495198][T28842] proc_pid_stack+0x13e/0x2c0 [ 638.500400][T28842] proc_single_show+0xf6/0x170 [ 638.505682][T28842] seq_read+0x4db/0x1130 [ 638.510447][T28842] do_iter_read+0x4a9/0x660 [ 638.515476][T28842] vfs_readv+0xf0/0x160 [ 638.520168][T28842] default_file_splice_read+0x475/0x890 [ 638.526233][T28842] do_splice_to+0x12a/0x190 [ 638.531256][T28842] splice_direct_to_actor+0x2d2/0x970 [ 638.537505][T28842] do_splice_direct+0x1da/0x2a0 [ 638.542882][T28842] do_sendfile+0x597/0xd00 [ 638.547819][T28842] __x64_sys_sendfile64+0x1dd/0x220 [ 638.553550][T28842] do_syscall_64+0x103/0x610 [ 638.558662][T28842] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 638.565064][T28842] [ 638.565064][T28842] -> #1 (&p->lock){+.+.}: [ 638.571574][T28842] lock_acquire+0x16f/0x3f0 [ 638.576595][T28842] __mutex_lock+0xf7/0x1310 [ 638.581620][T28842] mutex_lock_nested+0x16/0x20 [ 638.586921][T28842] seq_read+0x71/0x1130 [ 638.591632][T28842] proc_reg_read+0x1fe/0x2c0 [ 638.596742][T28842] do_iter_read+0x4a9/0x660 [ 638.601765][T28842] vfs_readv+0xf0/0x160 [ 638.606440][T28842] default_file_splice_read+0x475/0x890 [ 638.612542][T28842] do_splice_to+0x12a/0x190 07:04:19 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) fcntl$dupfd(r0, 0x406, r0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000040)=r3) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) [ 638.617563][T28842] do_splice+0x10a9/0x13c0 [ 638.622509][T28842] __x64_sys_splice+0x2c6/0x330 [ 638.627907][T28842] do_syscall_64+0x103/0x610 [ 638.633022][T28842] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 638.639423][T28842] [ 638.639423][T28842] -> #0 (&pipe->mutex/1){+.+.}: [ 638.646454][T28842] __lock_acquire+0x239c/0x3fb0 [ 638.651834][T28842] lock_acquire+0x16f/0x3f0 [ 638.656856][T28842] __mutex_lock+0xf7/0x1310 [ 638.661881][T28842] mutex_lock_nested+0x16/0x20 [ 638.667166][T28842] fifo_open+0x159/0xb00 [ 638.671950][T28842] do_dentry_open+0x488/0x1160 [ 638.677234][T28842] vfs_open+0xa0/0xd0 [ 638.681737][T28842] path_openat+0x10e9/0x46e0 [ 638.686866][T28842] do_filp_open+0x1a1/0x280 [ 638.691891][T28842] do_open_execat+0x137/0x690 [ 638.697094][T28842] __do_execve_file.isra.0+0x178d/0x23f0 [ 638.703249][T28842] __x64_sys_execve+0x8f/0xc0 [ 638.708448][T28842] do_syscall_64+0x103/0x610 [ 638.713566][T28842] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 638.719988][T28842] [ 638.719988][T28842] other info that might help us debug this: [ 638.719988][T28842] [ 638.730213][T28842] Chain exists of: [ 638.730213][T28842] &pipe->mutex/1 --> &p->lock --> &sig->cred_guard_mutex [ 638.730213][T28842] [ 638.743170][T28842] Possible unsafe locking scenario: [ 638.743170][T28842] [ 638.750618][T28842] CPU0 CPU1 [ 638.756419][T28842] ---- ---- [ 638.761776][T28842] lock(&sig->cred_guard_mutex); [ 638.766814][T28842] lock(&p->lock); [ 638.773135][T28842] lock(&sig->cred_guard_mutex); [ 638.780670][T28842] lock(&pipe->mutex/1); [ 638.784995][T28842] [ 638.784995][T28842] *** DEADLOCK *** [ 638.784995][T28842] [ 638.793149][T28842] 1 lock held by syz-executor.0/28842: [ 638.798606][T28842] #0: 000000009eea7565 (&sig->cred_guard_mutex){+.+.}, at: __do_execve_file.isra.0+0x376/0x23f0 [ 638.809123][T28842] [ 638.809123][T28842] stack backtrace: [ 638.815016][T28842] CPU: 0 PID: 28842 Comm: syz-executor.0 Not tainted 5.1.0-rc1-next-20190321 #8 [ 638.824052][T28842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 638.834102][T28842] Call Trace: [ 638.837395][T28842] dump_stack+0x172/0x1f0 [ 638.841729][T28842] print_circular_bug.isra.0.cold+0x1cc/0x28f [ 638.847806][T28842] check_prev_add.constprop.0+0xf11/0x23c0 [ 638.853622][T28842] ? depot_save_stack+0x1de/0x460 [ 638.858649][T28842] ? check_usage+0x570/0x570 [ 638.866887][T28842] ? mark_held_locks+0xa4/0xf0 [ 638.871655][T28842] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 638.877483][T28842] ? graph_lock+0x7b/0x200 [ 638.881920][T28842] ? __lockdep_reset_lock+0x450/0x450 [ 638.887318][T28842] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 638.893561][T28842] __lock_acquire+0x239c/0x3fb0 [ 638.898415][T28842] ? save_stack+0xa9/0xd0 [ 638.902757][T28842] ? mark_held_locks+0xf0/0xf0 [ 638.907547][T28842] lock_acquire+0x16f/0x3f0 [ 638.912052][T28842] ? fifo_open+0x159/0xb00 [ 638.916470][T28842] ? fifo_open+0x159/0xb00 [ 638.920925][T28842] __mutex_lock+0xf7/0x1310 [ 638.925433][T28842] ? fifo_open+0x159/0xb00 [ 638.929850][T28842] ? __lockdep_free_key_range+0x120/0x120 [ 638.935591][T28842] ? fifo_open+0x159/0xb00 [ 638.940007][T28842] ? fifo_open+0x2b5/0xb00 [ 638.944438][T28842] ? mutex_trylock+0x1e0/0x1e0 [ 638.949213][T28842] ? fifo_open+0x2b5/0xb00 [ 638.953634][T28842] ? kasan_check_write+0x14/0x20 [ 638.958576][T28842] ? lock_downgrade+0x880/0x880 [ 638.963543][T28842] mutex_lock_nested+0x16/0x20 [ 638.968303][T28842] ? mutex_lock_nested+0x16/0x20 [ 638.973244][T28842] fifo_open+0x159/0xb00 [ 638.977487][T28842] do_dentry_open+0x488/0x1160 [ 638.982277][T28842] ? pipe_release+0x280/0x280 [ 638.986954][T28842] ? chown_common+0x5c0/0x5c0 [ 638.991632][T28842] ? inode_permission+0xb4/0x570 [ 638.996574][T28842] vfs_open+0xa0/0xd0 [ 639.000559][T28842] path_openat+0x10e9/0x46e0 [ 639.005185][T28842] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 639.010561][T28842] ? __kmalloc+0x15c/0x740 [ 639.014978][T28842] ? prepare_creds+0x2f5/0x3f0 [ 639.019741][T28842] ? prepare_exec_creds+0x12/0xf0 [ 639.024769][T28842] ? __do_execve_file.isra.0+0x393/0x23f0 [ 639.030490][T28842] ? do_syscall_64+0x103/0x610 [ 639.035273][T28842] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 639.041336][T28842] ? perf_trace_lock+0xeb/0x510 [ 639.046189][T28842] do_filp_open+0x1a1/0x280 [ 639.050690][T28842] ? __lockdep_free_key_range+0x120/0x120 [ 639.056408][T28842] ? may_open_dev+0x100/0x100 [ 639.061094][T28842] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 639.067335][T28842] ? debug_smp_processor_id+0x3c/0x280 [ 639.072810][T28842] ? perf_trace_lock+0xeb/0x510 [ 639.077768][T28842] ? perf_trace_lock+0xeb/0x510 [ 639.082621][T28842] ? __lockdep_free_key_range+0x120/0x120 [ 639.088361][T28842] ? __lockdep_free_key_range+0x120/0x120 [ 639.094088][T28842] do_open_execat+0x137/0x690 [ 639.098768][T28842] ? unregister_binfmt+0x170/0x170 [ 639.103885][T28842] ? lock_downgrade+0x880/0x880 [ 639.108743][T28842] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 639.114991][T28842] ? kasan_check_read+0x11/0x20 [ 639.119931][T28842] ? do_raw_spin_unlock+0x57/0x270 [ 639.125045][T28842] __do_execve_file.isra.0+0x178d/0x23f0 [ 639.130700][T28842] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 639.136433][T28842] ? copy_strings_kernel+0x110/0x110 [ 639.141731][T28842] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 639.147976][T28842] ? getname_flags+0x277/0x5b0 [ 639.152751][T28842] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 639.158820][T28842] __x64_sys_execve+0x8f/0xc0 [ 639.163512][T28842] do_syscall_64+0x103/0x610 [ 639.168137][T28842] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 639.174031][T28842] RIP: 0033:0x458079 [ 639.177939][T28842] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 639.197568][T28842] RSP: 002b:00007f6bdd768c78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 639.205983][T28842] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458079 [ 639.213955][T28842] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000280 07:04:20 executing program 2: syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x2c, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) [ 639.221923][T28842] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 639.229893][T28842] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6bdd7696d4 [ 639.237886][T28842] R13: 00000000004be5b3 R14: 00000000004ceee0 R15: 00000000ffffffff [ 639.256896][ T3877] kobject: 'loop2' (000000002f494fe8): kobject_uevent_env 07:04:20 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]) r3 = gettid() r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r5 = dup(r1) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000340)=r5) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) write$P9_RLOCK(r4, &(0x7f0000000440)={0x8, 0x35, 0x2, 0x4}, 0x8) socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000880)) r8 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x7f) perf_event_open(&(0x7f00000004c0)={0x3, 0x70, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x4, 0x40000, 0x8, 0x7fff, 0x2, 0x8db0, 0x0, 0xb42, 0x2, 0x9, 0xe0, 0x3, 0xa95, 0x200, 0xffffffff, 0x3, 0x84da, 0x4, 0xa7, 0x1, 0xffff, 0x3, 0x3, 0x80000000, 0xffffffffffffff81, 0x3f, 0x8, 0x40, 0x4, 0x5, 0x80, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x7fffffff, 0xb4}, 0x9, 0xc189, 0x100000000, 0x5, 0x0, 0xffffffff, 0x5}, r3, 0x9, r0, 0x8) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$BLKGETSIZE64(r9, 0x80081272, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, &(0x7f0000000300)={0x4, 0x4, 0x8000, 0x4, 0x10001}, 0x14) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000040)=r10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) [ 639.284537][ T3877] kobject: 'loop2' (000000002f494fe8): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 639.300228][T28846] kobject: 'rx-0' (000000007699ce33): kobject_cleanup, parent 00000000090936c4 [ 639.311112][T28846] kobject: 'rx-0' (000000007699ce33): auto cleanup 'remove' event [ 639.318932][T28846] kobject: 'rx-0' (000000007699ce33): kobject_uevent_env 07:04:20 executing program 2: syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x2c, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) [ 639.330047][T28846] kobject: 'rx-0' (000000007699ce33): fill_kobj_path: path = '/devices/virtual/net/ppp0/queues/rx-0' [ 639.343715][ T3877] kobject: 'loop3' (000000004594399f): kobject_uevent_env [ 639.348056][T28846] kobject: 'rx-0' (000000007699ce33): auto cleanup kobject_del [ 639.363027][T28844] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 639.368697][T28846] kobject: 'rx-0' (000000007699ce33): calling ktype release 07:04:20 executing program 2: syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x2c, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) [ 639.375168][ T3877] kobject: 'loop3' (000000004594399f): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 639.388484][T28846] kobject: 'rx-0': free name [ 639.399865][T28846] kobject: 'tx-0' (00000000fa1d3227): kobject_cleanup, parent 00000000090936c4 [ 639.401769][T28844] FAT-fs (loop1): Filesystem has been set read-only [ 639.416091][T28846] kobject: 'tx-0' (00000000fa1d3227): auto cleanup 'remove' event [ 639.424757][ T3877] kobject: 'loop2' (000000002f494fe8): kobject_uevent_env 07:04:20 executing program 2: syz_emit_ethernet(0x0, 0x0, 0x0) 07:04:20 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]) r3 = gettid() r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r5 = dup(r1) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000340)=r5) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) write$P9_RLOCK(r4, &(0x7f0000000440)={0x8, 0x35, 0x2, 0x4}, 0x8) socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000880)) r8 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x7f) perf_event_open(&(0x7f00000004c0)={0x3, 0x70, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x4, 0x40000, 0x8, 0x7fff, 0x2, 0x8db0, 0x0, 0xb42, 0x2, 0x9, 0xe0, 0x3, 0xa95, 0x200, 0xffffffff, 0x3, 0x84da, 0x4, 0xa7, 0x1, 0xffff, 0x3, 0x3, 0x80000000, 0xffffffffffffff81, 0x3f, 0x8, 0x40, 0x4, 0x5, 0x80, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x7fffffff, 0xb4}, 0x9, 0xc189, 0x100000000, 0x5, 0x0, 0xffffffff, 0x5}, r3, 0x9, r0, 0x8) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$BLKGETSIZE64(r9, 0x80081272, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, &(0x7f0000000300)={0x4, 0x4, 0x8000, 0x4, 0x10001}, 0x14) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000040)=r10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) [ 639.436753][T28846] kobject: 'tx-0' (00000000fa1d3227): kobject_uevent_env [ 639.441724][ T3877] kobject: 'loop2' (000000002f494fe8): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 639.450773][T28846] kobject: 'tx-0' (00000000fa1d3227): fill_kobj_path: path = '/devices/virtual/net/ppp0/queues/tx-0' [ 639.459329][T28844] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 639.479079][ T3877] kobject: 'loop2' (000000002f494fe8): kobject_uevent_env [ 639.486987][ T3877] kobject: 'loop2' (000000002f494fe8): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 639.499629][T28846] kobject: 'tx-0' (00000000fa1d3227): auto cleanup kobject_del [ 639.502672][ T3877] kobject: 'loop1' (000000008bb5050f): kobject_uevent_env [ 639.511658][T28846] kobject: 'tx-0' (00000000fa1d3227): calling ktype release [ 639.518293][T28844] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 639.526720][T28846] kobject: 'tx-0': free name [ 639.530428][ T3877] kobject: 'loop1' (000000008bb5050f): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 639.537637][T28846] kobject: 'queues' (00000000090936c4): kobject_cleanup, parent (null) [ 639.551357][T28844] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 639.565800][ T3877] kobject: 'loop3' (000000004594399f): kobject_uevent_env [ 639.566802][T28846] kobject: 'queues' (00000000090936c4): calling ktype release [ 639.573349][ T3877] kobject: 'loop3' (000000004594399f): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 639.580728][T28846] kobject: 'queues' (00000000090936c4): kset_release [ 639.600178][ T3877] kobject: 'loop2' (000000002f494fe8): kobject_uevent_env [ 639.601983][T28846] kobject: 'queues': free name [ 639.607623][T28871] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 639.612906][T28846] kobject: 'ppp0' (00000000863ceb2b): kobject_uevent_env [ 639.627263][T28846] kobject: 'ppp0' (00000000863ceb2b): fill_kobj_path: path = '/devices/virtual/net/ppp0' [ 639.627884][ T3877] kobject: 'loop2' (000000002f494fe8): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 639.652863][ T3877] kobject: 'loop2' (000000002f494fe8): kobject_uevent_env [ 639.660198][ T3877] kobject: 'loop2' (000000002f494fe8): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 639.672421][ T3877] kobject: 'loop3' (000000004594399f): kobject_uevent_env [ 639.679866][ T3877] kobject: 'loop3' (000000004594399f): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 639.690311][T28846] kobject: 'ppp0' (00000000863ceb2b): kobject_cleanup, parent (null) [ 639.694860][ T3877] kobject: 'loop4' (000000005d7c360e): kobject_uevent_env [ 639.699318][T28846] kobject: 'ppp0' (00000000863ceb2b): calling ktype release [ 639.706616][ T3877] kobject: 'loop4' (000000005d7c360e): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 639.727615][T28846] kobject: 'ppp0': free name 07:04:20 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0xff}, 0x0, @in=@empty, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffff8}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 639.731059][ T7942] kobject: 'loop1' (000000008bb5050f): kobject_uevent_env [ 639.739885][ T7942] kobject: 'loop1' (000000008bb5050f): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 639.754750][ T3877] kobject: 'loop5' (0000000003144f8b): kobject_uevent_env [ 639.762046][ T3877] kobject: 'loop5' (0000000003144f8b): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 639.772877][ T3877] kobject: 'loop1' (000000008bb5050f): kobject_uevent_env 07:04:20 executing program 0: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x103c, 0x0) execve(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r0 = gettid() clone(0x2100001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, 0x0) 07:04:20 executing program 2: syz_emit_ethernet(0x0, 0x0, 0x0) 07:04:20 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]) r3 = gettid() r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r5 = dup(r1) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000340)=r5) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) write$P9_RLOCK(r4, &(0x7f0000000440)={0x8, 0x35, 0x2, 0x4}, 0x8) socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000880)) r8 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x7f) perf_event_open(&(0x7f00000004c0)={0x3, 0x70, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x4, 0x40000, 0x8, 0x7fff, 0x2, 0x8db0, 0x0, 0xb42, 0x2, 0x9, 0xe0, 0x3, 0xa95, 0x200, 0xffffffff, 0x3, 0x84da, 0x4, 0xa7, 0x1, 0xffff, 0x3, 0x3, 0x80000000, 0xffffffffffffff81, 0x3f, 0x8, 0x40, 0x4, 0x5, 0x80, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x7fffffff, 0xb4}, 0x9, 0xc189, 0x100000000, 0x5, 0x0, 0xffffffff, 0x5}, r3, 0x9, r0, 0x8) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$BLKGETSIZE64(r9, 0x80081272, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, &(0x7f0000000300)={0x4, 0x4, 0x8000, 0x4, 0x10001}, 0x14) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000040)=r10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) 07:04:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendto$inet(r1, &(0x7f0000000880)="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", 0x1000, 0x84, &(0x7f0000000080)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:04:20 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000040)=r3) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) [ 639.780090][ T3877] kobject: 'loop1' (000000008bb5050f): fill_kobj_path: path = '/devices/virtual/block/loop1' 07:04:20 executing program 2: syz_emit_ethernet(0x0, 0x0, 0x0) [ 639.835644][ T3877] kobject: 'loop0' (00000000da4131ed): kobject_uevent_env [ 639.844616][ T3877] kobject: 'loop0' (00000000da4131ed): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 639.853961][T28887] kobject: 'loop1' (000000008bb5050f): kobject_uevent_env [ 639.890954][T28887] kobject: 'loop1' (000000008bb5050f): fill_kobj_path: path = '/devices/virtual/block/loop1' 07:04:21 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]) gettid() r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r3 = dup(r0) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000340)=r3) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) write$P9_RLOCK(r2, &(0x7f0000000440)={0x8, 0x35, 0x2, 0x4}, 0x8) socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000880)) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x7f) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$BLKGETSIZE64(r8, 0x80081272, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r8, 0x6, 0x1d, &(0x7f0000000300)={0x4, 0x4, 0x8000, 0x4, 0x10001}, 0x14) ioctl$TUNSETIFINDEX(r7, 0x400454da, &(0x7f0000000040)=r9) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) 07:04:21 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000040)=r2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) 07:04:21 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]) gettid() r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r3 = dup(r0) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000340)=r3) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) write$P9_RLOCK(r2, &(0x7f0000000440)={0x8, 0x35, 0x2, 0x4}, 0x8) socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000880)) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x7f) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$BLKGETSIZE64(r8, 0x80081272, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r8, 0x6, 0x1d, &(0x7f0000000300)={0x4, 0x4, 0x8000, 0x4, 0x10001}, 0x14) ioctl$TUNSETIFINDEX(r7, 0x400454da, &(0x7f0000000040)=r9) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) [ 639.963932][ T3877] kobject: 'loop2' (000000002f494fe8): kobject_uevent_env [ 639.989542][ T3877] kobject: 'loop2' (000000002f494fe8): fill_kobj_path: path = '/devices/virtual/block/loop2' 07:04:21 executing program 2: syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x0, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) [ 640.030542][ T3877] kobject: 'loop3' (000000004594399f): kobject_uevent_env [ 640.063374][ T3877] kobject: 'loop3' (000000004594399f): fill_kobj_path: path = '/devices/virtual/block/loop3' 07:04:21 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0xff}, 0x0, @in=@empty, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffff8}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 07:04:21 executing program 2: syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x0, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) [ 640.103345][ T3877] kobject: 'loop4' (000000005d7c360e): kobject_uevent_env [ 640.131450][ T3877] kobject: 'loop4' (000000005d7c360e): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 640.178384][ T3877] kobject: 'loop1' (000000008bb5050f): kobject_uevent_env [ 640.211011][ T3877] kobject: 'loop1' (000000008bb5050f): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 640.248752][ T3877] kobject: 'loop3' (000000004594399f): kobject_uevent_env [ 640.279550][ T3877] kobject: 'loop3' (000000004594399f): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 640.309171][ T3877] kobject: 'loop2' (000000002f494fe8): kobject_uevent_env [ 640.333952][ T3877] kobject: 'loop2' (000000002f494fe8): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 640.361991][ T3877] kobject: 'loop5' (0000000003144f8b): kobject_uevent_env [ 640.369171][ T3877] kobject: 'loop5' (0000000003144f8b): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 640.417072][ T3877] kobject: 'loop2' (000000002f494fe8): kobject_uevent_env [ 640.438989][ T3877] kobject: 'loop2' (000000002f494fe8): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 640.468022][ T3877] kobject: 'loop4' (000000005d7c360e): kobject_uevent_env [ 640.483249][ T3877] kobject: 'loop4' (000000005d7c360e): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 640.511395][ C1] net_ratelimit: 21 callbacks suppressed [ 640.511416][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 640.513811][ T3877] kobject: 'loop3' (000000004594399f): kobject_uevent_env [ 640.517539][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 640.536014][ T3877] kobject: 'loop3' (000000004594399f): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 640.557269][ T3877] kobject: 'loop2' (000000002f494fe8): kobject_uevent_env [ 640.573345][ T3877] kobject: 'loop2' (000000002f494fe8): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 640.588126][ T3877] kobject: 'loop5' (0000000003144f8b): kobject_uevent_env [ 640.595576][ T3877] kobject: 'loop5' (0000000003144f8b): fill_kobj_path: path = '/devices/virtual/block/loop5' 07:04:21 executing program 0: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x103c, 0x0) execve(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r0 = gettid() clone(0x2100001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, 0x0) 07:04:21 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000040)=r2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) 07:04:21 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]) gettid() r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r3 = dup(r0) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000340)=r3) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) write$P9_RLOCK(r2, &(0x7f0000000440)={0x8, 0x35, 0x2, 0x4}, 0x8) socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000880)) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x7f) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$BLKGETSIZE64(r8, 0x80081272, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r8, 0x6, 0x1d, &(0x7f0000000300)={0x4, 0x4, 0x8000, 0x4, 0x10001}, 0x14) ioctl$TUNSETIFINDEX(r7, 0x400454da, &(0x7f0000000040)=r9) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) [ 640.651942][ T3877] kobject: 'loop1' (000000008bb5050f): kobject_uevent_env [ 640.659118][ T3877] kobject: 'loop1' (000000008bb5050f): fill_kobj_path: path = '/devices/virtual/block/loop1' 07:04:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = getpid() syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f0000000240)='./bus\x00', 0x2, 0x4, &(0x7f0000000940)=[{&(0x7f0000000680)="1291e0c111a8bc4b4428d2d4d26936cb11f9a2ec752c24ecbc3f7fb9edaf8be29dba2512623523b8f186f208a9ea5b439d6446b556badc5e8944fa828c80c7bb71094c45a6b2700197875e63864bd1105df538cb06cd9ef8eeea61e23aa08c93ed9db073b771429161963c0d01b460177e87307f69abfc698545933dace865147d9161a166fc1569ee11b6146ea3ec60805b92cd3ff5c246", 0x98, 0x80000001}, {&(0x7f00000003c0)="5650b208b7b473d5175a86c1870baaf2ede325fe0a4ba2ce2dd77052e39b8a95c14132b7813e705cbc2b2025e1be667db151b82c43a1bc54705572c53560142acd2c9e90b12f86912a5271d72a3f6b", 0x4f, 0x80}, {&(0x7f0000000740)="5827da4f88f6b3c20ddce756c02747b5ccbb82ac501c240f39c562c7ce0e1ff11b42ffa0d86102d3bb2301533ada78b4d6b2628d43befb1126aaa77da52fa1b8356dd050db3da6fc6bdcc8b78f8daa4c76ddff42f77905a155baa55b27402d77fda9a479a0ff7649331ce01d2ea08e359b5ff53a780000c6fb1371059fc6a9befa2588dd68d9ffdc92b40b5fd866048bab26ba9a9e8f723b5d55504e4b8ca24926c07c", 0xa3, 0x1f}, {&(0x7f0000000880)="5085ad1ed31c0eee277aac914d535226ae3236b1ff23467e58099b7254168fa199070a4c7e4ce6c0951fb4bb6c4a7b17afd9ce72e641f6dd0780a1bfb1f6119798e202aa407cf8d022011bf79924e7b07716d6c3c978583f506340acce8bd88338bec844d3faf9d47b70e7c65eeb6e36b48f44a7178d3b42628decbadacf6db32b8bdab87ca8d47a3018ea11d365f7406cd4108704", 0x95}], 0x2000, &(0x7f00000009c0)={[{@nonumtail='nnonumtail=1'}, {@numtail='nonumtail=0'}, {@shortname_lower='shortname=lower'}, {@shortname_mixed='shortname=mixed'}, {@nonumtail='nnonumtail=1'}, {@numtail='nonumtail=0'}, {@numtail='nonumtail=0'}, {@fat=@dmask={'dmask', 0x3d, 0x45}}, {@fat=@nocase='nocase'}], [{@appraise_type='appraise_type=imasig'}, {@pcr={'pcr', 0x3d, 0x1a}}]}) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1, &(0x7f0000000300)=""/188, &(0x7f0000000580)=""/139, &(0x7f0000000080)=""/122, 0x6000}) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:04:21 executing program 2: syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x0, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 07:04:21 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0xff}, 0x0, @in=@empty, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffff8}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 640.696166][ T3877] kobject: 'loop0' (00000000da4131ed): kobject_uevent_env [ 640.715363][ T3877] kobject: 'loop0' (00000000da4131ed): fill_kobj_path: path = '/devices/virtual/block/loop0' 07:04:21 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]) r3 = gettid() r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r5 = dup(r1) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000340)=r5) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) write$P9_RLOCK(r4, &(0x7f0000000440)={0x8, 0x35, 0x2, 0x4}, 0x8) socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000880)) openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) perf_event_open(&(0x7f00000004c0)={0x3, 0x70, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x4, 0x40000, 0x8, 0x7fff, 0x2, 0x8db0, 0x0, 0xb42, 0x2, 0x9, 0xe0, 0x3, 0xa95, 0x200, 0xffffffff, 0x3, 0x84da, 0x4, 0xa7, 0x1, 0xffff, 0x3, 0x3, 0x80000000, 0xffffffffffffff81, 0x3f, 0x8, 0x40, 0x4, 0x5, 0x80, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x7fffffff, 0xb4}, 0x9, 0xc189, 0x100000000, 0x5, 0x0, 0xffffffff, 0x5}, r3, 0x9, r0, 0x8) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$BLKGETSIZE64(r9, 0x80081272, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, &(0x7f0000000300)={0x4, 0x4, 0x8000, 0x4, 0x10001}, 0x14) ioctl$TUNSETIFINDEX(r8, 0x400454da, &(0x7f0000000040)=r10) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) 07:04:21 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000040)=r2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) [ 640.789161][ T7942] kobject: 'loop1' (000000008bb5050f): kobject_uevent_env [ 640.801039][ T7942] kobject: 'loop1' (000000008bb5050f): fill_kobj_path: path = '/devices/virtual/block/loop1' 07:04:21 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0xff}, 0x0, @in=@empty, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffff8}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 640.831802][ T3877] kobject: 'loop3' (000000004594399f): kobject_uevent_env [ 640.858780][T28928] kobject: 'loop1' (000000008bb5050f): kobject_uevent_env [ 640.869223][ T3877] kobject: 'loop3' (000000004594399f): fill_kobj_path: path = '/devices/virtual/block/loop3' 07:04:22 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="800000000000000007000000000000000100000000000000050000000000000003000000000000000509ff0100000000000000000000000000000000000000000000000900055eccb76a1b64d4574afe0000000000000000000004000000da2ed9428988bcdf43001f3de2035d0010000000000000000309000600000000000000000000000000000000010000000bbbcb056f0100000082ffffffffffffff090000000000000000097d58030300000000000000000000000000000000000000000000000000000100dc00000000000000010000000000000000000000000000d01e006b022f67706943000000100000000000002000000000000000000000000000000000000000000000000000000000d708000000000000ff78635346d78bb1869a7f00000000000008000000000000008d1109030000000000000000000000000000001800000000000600000000000000000000000000000122008000000000020000ff40020800f548a72876be4edee34b229bce16b900000037164680080c0273819001f18feebdce000000000000000000005bb71592cb0fbf3d0000ffffffffffffffe000000001800000f662639aa068e740ac5bf8de54e52600000000080000000000000009000000000000000800ff7070fa60d4bc295900000000000000000000000000000000000000002046df0bfa99bdc156ff0f21320cecdd061d5f881fa12e7c9e7c0ac904e31be414f8f0c0e41ef2030e490000000087b74cab69466aa32a545918006f46ed488b000000fbc9bdd305d78ee3b103977c5915194291f25e245ce5b261d72885a819fa85b22f2d6bbac581ca73a9dbed54ea1200000000daeeefe15a616c832bcb174b1eb027bbab28591ea3289dd8943cea66587e0a4ad48055a7f5e0724a25e283d09a3b2bbd96b3dc000000000000000000000000000000000000c2b69fae4d6b4cb8ac9a3c2ccb1e5c92b91df55b7ac2e1900b97284ee5ec26c0c24d0500ce1a574eb8c70ee204ea090000005b81ac1f3763e700000000000000000000000000000000000000000000000000000000000000000023635c257fe254ddcd6c6ff3ff4ba238fa2800359ae0ef191befc787bdfb5c4391f9ecf6ebacee6cf43526618f3e0b5569f86c85adf50e52ab05d6f446640e80a255196fa0ef404b3a9a4f419442102099a935cecad84d9e83e23c0ba967dd4a42e478f248ed4cc836ea01f6d3a85a448c"]) r3 = gettid() r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r5 = dup(r1) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000340)=r5) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) write$P9_RLOCK(r4, &(0x7f0000000440)={0x8, 0x35, 0x2, 0x4}, 0x8) socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000880)) openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) perf_event_open(&(0x7f00000004c0)={0x3, 0x70, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x4, 0x40000, 0x8, 0x7fff, 0x2, 0x8db0, 0x0, 0xb42, 0x2, 0x9, 0xe0, 0x3, 0xa95, 0x200, 0xffffffff, 0x3, 0x84da, 0x4, 0xa7, 0x1, 0xffff, 0x3, 0x3, 0x80000000, 0xffffffffffffff81, 0x3f, 0x8, 0x40, 0x4, 0x5, 0x80, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x7fffffff, 0xb4}, 0x9, 0xc189, 0x100000000, 0x5, 0x0, 0xffffffff, 0x5}, r3, 0x9, r0, 0x8) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$BLKGETSIZE64(r9, 0x80081272, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, &(0x7f0000000300)={0x4, 0x4, 0x8000, 0x4, 0x10001}, 0x14) ioctl$TUNSETIFINDEX(r8, 0x400454da, &(0x7f0000000040)=r10) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) 07:04:22 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000040)=r2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) [ 640.880753][T28928] kobject: 'loop1' (000000008bb5050f): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 640.897762][ T3877] kobject: 'loop4' (000000005d7c360e): kobject_uevent_env [ 640.909688][ T3877] kobject: 'loop4' (000000005d7c360e): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 640.931345][ T3877] kobject: 'loop1' (000000008bb5050f): kobject_uevent_env [ 640.953861][ T3877] kobject: 'loop1' (000000008bb5050f): fill_kobj_path: path = '/devices/virtual/block/loop1' 07:04:22 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000040)=r2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) [ 640.987183][ T3877] kobject: 'loop2' (000000002f494fe8): kobject_uevent_env [ 641.007308][ T3877] kobject: 'loop2' (000000002f494fe8): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 641.047479][ T3877] kobject: 'loop3' (000000004594399f): kobject_uevent_env [ 641.075055][ T3877] kobject: 'loop3' (000000004594399f): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 641.108735][ T3877] kobject: 'loop4' (000000005d7c360e): kobject_uevent_env [ 641.128738][T28948] kobject: 'rose0' (0000000060103e87): kobject_add_internal: parent: 'net', set: 'devices' [ 641.144557][ T3877] kobject: 'loop4' (000000005d7c360e): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 641.145133][T28948] kobject: 'rose0' (0000000060103e87): kobject_uevent_env [ 641.177760][ T3877] kobject: 'loop1' (000000008bb5050f): kobject_uevent_env [ 641.202166][ T3877] kobject: 'loop1' (000000008bb5050f): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 641.244878][ T3877] kobject: 'loop4' (000000005d7c360e): kobject_uevent_env [ 641.263566][T28948] kobject: 'rose0' (0000000060103e87): fill_kobj_path: path = '/devices/virtual/net/rose0' [ 641.274848][ T3877] kobject: 'loop4' (000000005d7c360e): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 641.300615][T28948] kobject: 'queues' (00000000c1bf7e66): kobject_add_internal: parent: 'rose0', set: '' [ 641.310988][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 641.311053][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 641.320016][ T3877] kobject: 'loop3' (000000004594399f): kobject_uevent_env [ 641.336869][ T3877] kobject: 'loop3' (000000004594399f): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 641.341189][T28948] kobject: 'queues' (00000000c1bf7e66): kobject_uevent_env [ 641.369337][ T3877] kobject: 'loop5' (0000000003144f8b): kobject_uevent_env [ 641.378346][T28948] kobject: 'queues' (00000000c1bf7e66): kobject_uevent_env: filter function caused the event to drop! [ 641.390906][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 641.393885][ T3877] kobject: 'loop5' (0000000003144f8b): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 641.396659][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 641.412670][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 641.418533][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 641.445276][T28948] kobject: 'rx-0' (00000000d3a2e583): kobject_add_internal: parent: 'queues', set: 'queues' [ 641.460626][ T3877] kobject: 'loop2' (000000002f494fe8): kobject_uevent_env [ 641.461727][T28948] kobject: 'rx-0' (00000000d3a2e583): kobject_uevent_env [ 641.478526][T28948] kobject: 'rx-0' (00000000d3a2e583): fill_kobj_path: path = '/devices/virtual/net/rose0/queues/rx-0' 07:04:22 executing program 0: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x103c, 0x0) execve(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r0 = gettid() clone(0x2100001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, 0x0) 07:04:22 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]) r3 = gettid() r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r5 = dup(r1) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000340)=r5) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) write$P9_RLOCK(r4, &(0x7f0000000440)={0x8, 0x35, 0x2, 0x4}, 0x8) socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000880)) openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) perf_event_open(&(0x7f00000004c0)={0x3, 0x70, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x4, 0x40000, 0x8, 0x7fff, 0x2, 0x8db0, 0x0, 0xb42, 0x2, 0x9, 0xe0, 0x3, 0xa95, 0x200, 0xffffffff, 0x3, 0x84da, 0x4, 0xa7, 0x1, 0xffff, 0x3, 0x3, 0x80000000, 0xffffffffffffff81, 0x3f, 0x8, 0x40, 0x4, 0x5, 0x80, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x7fffffff, 0xb4}, 0x9, 0xc189, 0x100000000, 0x5, 0x0, 0xffffffff, 0x5}, r3, 0x9, r0, 0x8) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$BLKGETSIZE64(r9, 0x80081272, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, &(0x7f0000000300)={0x4, 0x4, 0x8000, 0x4, 0x10001}, 0x14) ioctl$TUNSETIFINDEX(r8, 0x400454da, &(0x7f0000000040)=r10) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) 07:04:22 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0xff}, 0x0, @in=@empty, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffff8}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 641.483819][ T3877] kobject: 'loop2' (000000002f494fe8): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 641.489772][T28948] kobject: 'tx-0' (00000000fe8aa7dd): kobject_add_internal: parent: 'queues', set: 'queues' [ 641.528346][T28948] kobject: 'tx-0' (00000000fe8aa7dd): kobject_uevent_env [ 641.539731][ T3877] kobject: 'loop0' (00000000da4131ed): kobject_uevent_env [ 641.567391][ T3877] kobject: 'loop0' (00000000da4131ed): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 641.574556][T28948] kobject: 'tx-0' (00000000fe8aa7dd): fill_kobj_path: path = '/devices/virtual/net/rose0/queues/tx-0' [ 641.647700][T28948] kobject: 'batman_adv' (0000000047dc0bca): kobject_add_internal: parent: 'rose0', set: '' [ 641.654548][ T3877] kobject: 'loop1' (000000008bb5050f): kobject_uevent_env [ 641.674815][T28945] kobject: 'batman_adv' (0000000047dc0bca): kobject_uevent_env [ 641.690108][T28945] kobject: 'batman_adv' (0000000047dc0bca): kobject_uevent_env: filter function caused the event to drop! [ 641.691896][ T3877] kobject: 'loop1' (000000008bb5050f): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 641.701871][T28945] kobject: 'batman_adv' (0000000047dc0bca): kobject_cleanup, parent (null) [ 641.721622][T28945] kobject: 'batman_adv' (0000000047dc0bca): calling ktype release [ 641.729539][T28945] kobject: (0000000047dc0bca): dynamic_kobj_release [ 641.736539][T28945] kobject: 'batman_adv': free name 07:04:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:04:22 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0xff}, 0x0, @in=@empty, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffff8}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 641.742969][ T3877] kobject: 'loop1' (000000008bb5050f): kobject_uevent_env [ 641.750403][T28945] kobject: 'rx-0' (00000000d3a2e583): kobject_cleanup, parent 00000000c1bf7e66 [ 641.761489][T28945] kobject: 'rx-0' (00000000d3a2e583): auto cleanup 'remove' event [ 641.774303][ T3877] kobject: 'loop1' (000000008bb5050f): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 641.784854][T28945] kobject: 'rx-0' (00000000d3a2e583): kobject_uevent_env [ 641.797592][T28945] kobject: 'rx-0' (00000000d3a2e583): fill_kobj_path: path = '/devices/virtual/net/rose0/queues/rx-0' [ 641.815028][ T7942] kobject: 'loop1' (000000008bb5050f): kobject_uevent_env [ 641.819754][T28945] kobject: 'rx-0' (00000000d3a2e583): auto cleanup kobject_del [ 641.826815][ T7942] kobject: 'loop1' (000000008bb5050f): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 641.840947][T28945] kobject: 'rx-0' (00000000d3a2e583): calling ktype release [ 641.848329][T28945] kobject: 'rx-0': free name [ 641.860960][T28945] kobject: 'tx-0' (00000000fe8aa7dd): kobject_cleanup, parent 00000000c1bf7e66 [ 641.876772][T28945] kobject: 'tx-0' (00000000fe8aa7dd): auto cleanup 'remove' event [ 641.887176][ T3877] kobject: 'loop1' (000000008bb5050f): kobject_uevent_env [ 641.894957][T28945] kobject: 'tx-0' (00000000fe8aa7dd): kobject_uevent_env [ 641.902393][ T3877] kobject: 'loop1' (000000008bb5050f): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 641.917764][T28945] kobject: 'tx-0' (00000000fe8aa7dd): fill_kobj_path: path = '/devices/virtual/net/rose0/queues/tx-0' [ 641.929477][T28964] kobject: 'loop1' (000000008bb5050f): kobject_uevent_env [ 641.936628][T28945] kobject: 'tx-0' (00000000fe8aa7dd): auto cleanup kobject_del [ 641.936672][T28945] kobject: 'tx-0' (00000000fe8aa7dd): calling ktype release [ 641.936678][T28945] kobject: 'tx-0': free name [ 641.936699][T28945] kobject: 'queues' (00000000c1bf7e66): kobject_cleanup, parent (null) [ 641.936706][T28945] kobject: 'queues' (00000000c1bf7e66): calling ktype release [ 641.936714][T28945] kobject: 'queues' (00000000c1bf7e66): kset_release [ 641.936724][T28945] kobject: 'queues': free name [ 641.937104][T28945] kobject: 'rose0' (0000000060103e87): kobject_uevent_env [ 641.960916][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 641.997280][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 642.011385][T28945] kobject: 'rose0' (0000000060103e87): fill_kobj_path: path = '/devices/virtual/net/rose0' 07:04:23 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]) r3 = gettid() r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r5 = dup(r1) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000340)=r5) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) write$P9_RLOCK(r4, &(0x7f0000000440)={0x8, 0x35, 0x2, 0x4}, 0x8) socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000880)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x7f) perf_event_open(&(0x7f00000004c0)={0x3, 0x70, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x4, 0x40000, 0x8, 0x7fff, 0x2, 0x8db0, 0x0, 0xb42, 0x2, 0x9, 0xe0, 0x3, 0xa95, 0x200, 0xffffffff, 0x3, 0x84da, 0x4, 0xa7, 0x1, 0xffff, 0x3, 0x3, 0x80000000, 0xffffffffffffff81, 0x3f, 0x8, 0x40, 0x4, 0x5, 0x80, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x7fffffff, 0xb4}, 0x9, 0xc189, 0x100000000, 0x5, 0x0, 0xffffffff, 0x5}, r3, 0x9, r0, 0x8) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$BLKGETSIZE64(r9, 0x80081272, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, &(0x7f0000000300)={0x4, 0x4, 0x8000, 0x4, 0x10001}, 0x14) ioctl$TUNSETIFINDEX(r8, 0x400454da, &(0x7f0000000040)=r10) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) [ 642.047616][T28964] kobject: 'loop1' (000000008bb5050f): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 642.081016][T28945] kobject: 'rose0' (0000000060103e87): kobject_cleanup, parent (null) [ 642.094617][T28945] kobject: 'rose0' (0000000060103e87): calling ktype release [ 642.116447][T28945] kobject: 'rose0': free name [ 642.122279][ T3877] kobject: 'loop3' (000000004594399f): kobject_uevent_env 07:04:23 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000040)=r2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) [ 642.143633][T28964] FAT-fs (loop1): bogus number of reserved sectors [ 642.151784][ T3877] kobject: 'loop3' (000000004594399f): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 642.183650][T28964] FAT-fs (loop1): Can't find a valid FAT filesystem 07:04:23 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]) r3 = gettid() r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r5 = dup(r1) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000340)=r5) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) write$P9_RLOCK(r4, &(0x7f0000000440)={0x8, 0x35, 0x2, 0x4}, 0x8) socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000880)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x7f) perf_event_open(&(0x7f00000004c0)={0x3, 0x70, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x4, 0x40000, 0x8, 0x7fff, 0x2, 0x8db0, 0x0, 0xb42, 0x2, 0x9, 0xe0, 0x3, 0xa95, 0x200, 0xffffffff, 0x3, 0x84da, 0x4, 0xa7, 0x1, 0xffff, 0x3, 0x3, 0x80000000, 0xffffffffffffff81, 0x3f, 0x8, 0x40, 0x4, 0x5, 0x80, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x7fffffff, 0xb4}, 0x9, 0xc189, 0x100000000, 0x5, 0x0, 0xffffffff, 0x5}, r3, 0x9, r0, 0x8) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$BLKGETSIZE64(r9, 0x80081272, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, &(0x7f0000000300)={0x4, 0x4, 0x8000, 0x4, 0x10001}, 0x14) ioctl$TUNSETIFINDEX(r8, 0x400454da, &(0x7f0000000040)=r10) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) [ 642.197763][ T3877] kobject: 'loop4' (000000005d7c360e): kobject_uevent_env 07:04:23 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 642.239098][T28972] kobject: 'rose0' (00000000cdabafbd): kobject_add_internal: parent: 'net', set: 'devices' [ 642.248037][ T3877] kobject: 'loop4' (000000005d7c360e): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 642.253415][T28972] kobject: 'rose0' (00000000cdabafbd): kobject_uevent_env [ 642.269064][T28972] kobject: 'rose0' (00000000cdabafbd): fill_kobj_path: path = '/devices/virtual/net/rose0' [ 642.292787][ T3877] kobject: 'loop3' (000000004594399f): kobject_uevent_env [ 642.308373][T28972] kobject: 'queues' (00000000a1ce9bf6): kobject_add_internal: parent: 'rose0', set: '' [ 642.319036][T28964] kobject: 'loop1' (000000008bb5050f): kobject_uevent_env [ 642.326391][ T3877] kobject: 'loop3' (000000004594399f): fill_kobj_path: path = '/devices/virtual/block/loop3' 07:04:23 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0xff}, 0x0, @in=@empty, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffff8}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 642.332421][T28972] kobject: 'queues' (00000000a1ce9bf6): kobject_uevent_env [ 642.343476][T28964] kobject: 'loop1' (000000008bb5050f): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 642.352585][T28972] kobject: 'queues' (00000000a1ce9bf6): kobject_uevent_env: filter function caused the event to drop! [ 642.373413][T28972] kobject: 'rx-0' (00000000aa58d446): kobject_add_internal: parent: 'queues', set: 'queues' [ 642.385827][T28972] kobject: 'rx-0' (00000000aa58d446): kobject_uevent_env [ 642.395159][T28972] kobject: 'rx-0' (00000000aa58d446): fill_kobj_path: path = '/devices/virtual/net/rose0/queues/rx-0' [ 642.416679][ T3877] kobject: 'loop5' (0000000003144f8b): kobject_uevent_env 07:04:23 executing program 0: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x103c, 0x0) execve(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r0 = gettid() clone(0x2100001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, 0x0) [ 642.439515][T28972] kobject: 'tx-0' (00000000f3d6ded3): kobject_add_internal: parent: 'queues', set: 'queues' [ 642.445585][ T3877] kobject: 'loop5' (0000000003144f8b): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 642.466830][T28972] kobject: 'tx-0' (00000000f3d6ded3): kobject_uevent_env [ 642.492997][ T3877] kobject: 'loop2' (000000002f494fe8): kobject_uevent_env [ 642.510484][T28972] kobject: 'tx-0' (00000000f3d6ded3): fill_kobj_path: path = '/devices/virtual/net/rose0/queues/tx-0' [ 642.510603][ T3877] kobject: 'loop2' (000000002f494fe8): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 642.544926][ T3877] kobject: 'loop1' (000000008bb5050f): kobject_uevent_env [ 642.556795][ T3877] kobject: 'loop1' (000000008bb5050f): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 642.572082][ T3877] kobject: 'loop0' (00000000da4131ed): kobject_uevent_env [ 642.574259][T28972] kobject: 'batman_adv' (00000000f9397194): kobject_add_internal: parent: 'rose0', set: '' [ 642.583868][ T3877] kobject: 'loop0' (00000000da4131ed): fill_kobj_path: path = '/devices/virtual/block/loop0' 07:04:23 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]) r3 = gettid() r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r5 = dup(r1) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000340)=r5) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) write$P9_RLOCK(r4, &(0x7f0000000440)={0x8, 0x35, 0x2, 0x4}, 0x8) socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000880)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x7f) perf_event_open(&(0x7f00000004c0)={0x3, 0x70, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x4, 0x40000, 0x8, 0x7fff, 0x2, 0x8db0, 0x0, 0xb42, 0x2, 0x9, 0xe0, 0x3, 0xa95, 0x200, 0xffffffff, 0x3, 0x84da, 0x4, 0xa7, 0x1, 0xffff, 0x3, 0x3, 0x80000000, 0xffffffffffffff81, 0x3f, 0x8, 0x40, 0x4, 0x5, 0x80, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x7fffffff, 0xb4}, 0x9, 0xc189, 0x100000000, 0x5, 0x0, 0xffffffff, 0x5}, r3, 0x9, r0, 0x8) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$BLKGETSIZE64(r9, 0x80081272, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, &(0x7f0000000300)={0x4, 0x4, 0x8000, 0x4, 0x10001}, 0x14) ioctl$TUNSETIFINDEX(r8, 0x400454da, &(0x7f0000000040)=r10) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) [ 642.669843][T28971] kobject: 'batman_adv' (00000000f9397194): kobject_uevent_env [ 642.684438][T28971] kobject: 'batman_adv' (00000000f9397194): kobject_uevent_env: filter function caused the event to drop! [ 642.714690][ T3877] kobject: 'loop3' (000000004594399f): kobject_uevent_env [ 642.731214][T28971] kobject: 'batman_adv' (00000000f9397194): kobject_cleanup, parent (null) [ 642.741083][T28964] kobject: 'loop1' (000000008bb5050f): kobject_uevent_env [ 642.748232][T28964] kobject: 'loop1' (000000008bb5050f): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 642.760921][ T3877] kobject: 'loop3' (000000004594399f): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 642.775432][T28971] kobject: 'batman_adv' (00000000f9397194): calling ktype release [ 642.789875][T28971] kobject: (00000000f9397194): dynamic_kobj_release [ 642.808927][T28971] kobject: 'batman_adv': free name 07:04:23 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 642.822829][ T3877] kobject: 'loop1' (000000008bb5050f): kobject_uevent_env [ 642.830376][T28971] kobject: 'rx-0' (00000000aa58d446): kobject_cleanup, parent 00000000a1ce9bf6 [ 642.839848][ T3877] kobject: 'loop1' (000000008bb5050f): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 642.851050][T28971] kobject: 'rx-0' (00000000aa58d446): auto cleanup 'remove' event [ 642.863205][T28971] kobject: 'rx-0' (00000000aa58d446): kobject_uevent_env 07:04:24 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f00000000c0)=0xa7, 0x4) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="a4bb575591cf0001000082aa0000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000014c0)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@loopback}}, &(0x7f00000015c0)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000001600)={@empty, 0x14, r2}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r3 = getpid() sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r3, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000080)=@bcast) r4 = creat(&(0x7f00000001c0)='./file1\x00', 0x0) ioctl$RTC_EPOCH_SET(r4, 0x4008700e, 0x7) [ 642.878556][ T3877] kobject: 'loop5' (0000000003144f8b): kobject_uevent_env [ 642.888142][T28971] kobject: 'rx-0' (00000000aa58d446): fill_kobj_path: path = '/devices/virtual/net/rose0/queues/rx-0' [ 642.889733][ T3877] kobject: 'loop5' (0000000003144f8b): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 642.924690][T28971] kobject: 'rx-0' (00000000aa58d446): auto cleanup kobject_del [ 642.944988][T28971] kobject: 'rx-0' (00000000aa58d446): calling ktype release [ 642.952943][ T7942] kobject: 'loop1' (000000008bb5050f): kobject_uevent_env [ 642.962503][ T7942] kobject: 'loop1' (000000008bb5050f): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 642.984224][T28971] kobject: 'rx-0': free name [ 642.997276][T28971] kobject: 'tx-0' (00000000f3d6ded3): kobject_cleanup, parent 00000000a1ce9bf6 [ 643.008348][ T3877] kobject: 'loop1' (000000008bb5050f): kobject_uevent_env [ 643.022369][T28971] kobject: 'tx-0' (00000000f3d6ded3): auto cleanup 'remove' event 07:04:24 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0xff}, 0x0, @in=@empty, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffff8}}, 0xe8) [ 643.037354][ T3877] kobject: 'loop1' (000000008bb5050f): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 643.045298][T28996] kobject: 'loop1' (000000008bb5050f): kobject_uevent_env [ 643.054111][T28971] kobject: 'tx-0' (00000000f3d6ded3): kobject_uevent_env [ 643.067629][T28996] kobject: 'loop1' (000000008bb5050f): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 643.077115][T28971] kobject: 'tx-0' (00000000f3d6ded3): fill_kobj_path: path = '/devices/virtual/net/rose0/queues/tx-0' [ 643.097214][ T3877] kobject: 'loop2' (000000002f494fe8): kobject_uevent_env [ 643.105233][ T3877] kobject: 'loop2' (000000002f494fe8): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 643.120966][T28971] kobject: 'tx-0' (00000000f3d6ded3): auto cleanup kobject_del 07:04:24 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0xff}, 0x0, @in=@empty, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffff8}}, 0xe8) [ 643.133798][T28971] kobject: 'tx-0' (00000000f3d6ded3): calling ktype release [ 643.159384][ T3877] kobject: 'loop2' (000000002f494fe8): kobject_uevent_env [ 643.169222][ T3877] kobject: 'loop2' (000000002f494fe8): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 643.173289][T28971] kobject: 'tx-0': free name [ 643.183872][ T3877] kobject: 'loop1' (000000008bb5050f): kobject_uevent_env [ 643.191949][ T3877] kobject: 'loop1' (000000008bb5050f): fill_kobj_path: path = '/devices/virtual/block/loop1' 07:04:24 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0xff}, 0x0, @in=@empty, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffff8}}, 0xe8) [ 643.210931][T28971] kobject: 'queues' (00000000a1ce9bf6): kobject_cleanup, parent (null) [ 643.239326][T28971] kobject: 'queues' (00000000a1ce9bf6): calling ktype release 07:04:24 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 643.269106][ T3877] kobject: 'loop2' (000000002f494fe8): kobject_uevent_env [ 643.276475][T28971] kobject: 'queues' (00000000a1ce9bf6): kset_release [ 643.290987][ T3877] kobject: 'loop2' (000000002f494fe8): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 643.311545][T28971] kobject: 'queues': free name [ 643.319120][T28971] kobject: 'rose0' (00000000cdabafbd): kobject_uevent_env [ 643.349283][ T3877] kobject: 'loop5' (0000000003144f8b): kobject_uevent_env [ 643.356951][ T3877] kobject: 'loop5' (0000000003144f8b): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 643.368216][ T3877] kobject: 'loop0' (00000000da4131ed): kobject_uevent_env [ 643.375884][ T3877] kobject: 'loop0' (00000000da4131ed): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 643.384441][T28971] kobject: 'rose0' (00000000cdabafbd): fill_kobj_path: path = '/devices/virtual/net/rose0' [ 643.412945][ T3877] kobject: 'loop2' (000000002f494fe8): kobject_uevent_env [ 643.421742][ T3877] kobject: 'loop2' (000000002f494fe8): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 643.494709][T28971] kobject: 'rose0' (00000000cdabafbd): kobject_cleanup, parent (null) [ 643.516737][T28971] kobject: 'rose0' (00000000cdabafbd): calling ktype release 07:04:24 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000040)=r2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) 07:04:24 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b0000f4afd7030a7c", 0x12, 0x0, 0x0, 0x0) 07:04:24 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0xff}, 0x0, @in=@empty, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffff8}}, 0xe8) 07:04:24 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="800000000000000007000000000000000100000000000000050000000000000003000000000000000509ff0100000000000000000000000000000000000000000000000900055eccb76a1b64d4574afe0000000000000000000004000000da2ed9428988bcdf43001f3de2035d0010000000000000000309000600000000000000000000000000000000010000000bbbcb056f0100000082ffffffffffffff090000000000000000097d58030300000000000000000000000000000000000000000000000000000100dc00000000000000010000000000000000000000000000d01e006b022f67706943000000100000000000002000000000000000000000000000000000000000000000000000000000d708000000000000ff78635346d78bb1869a7f00000000000008000000000000008d1109030000000000000000000000000000001800000000000600000000000000000000000000000122008000000000020000ff40020800f548a72876be4edee34b229bce16b900000037164680080c0273819001f18feebdce000000000000000000005bb71592cb0fbf3d0000ffffffffffffffe000000001800000f662639aa068e740ac5bf8de54e52600000000080000000000000009000000000000000800ff7070fa60d4bc295900000000000000000000000000000000000000002046df0bfa99bdc156ff0f21320cecdd061d5f881fa12e7c9e7c0ac904e31be414f8f0c0e41ef2030e490000000087b74cab69466aa32a545918006f46ed488b000000fbc9bdd305d78ee3b103977c5915194291f25e245ce5b261d72885a819fa85b22f2d6bbac581ca73a9dbed54ea1200000000daeeefe15a616c832bcb174b1eb027bbab28591ea3289dd8943cea66587e0a4ad48055a7f5e0724a25e283d09a3b2bbd96b3dc000000000000000000000000000000000000c2b69fae4d6b4cb8ac9a3c2ccb1e5c92b91df55b7ac2e1900b97284ee5ec26c0c24d0500ce1a574eb8c70ee204ea090000005b81ac1f3763e700000000000000000000000000000000000000000000000000000000000000000023635c257fe254ddcd6c6ff3ff4ba238fa2800359ae0ef191befc787bdfb5c4391f9ecf6ebacee6cf43526618f3e0b5569f86c85adf50e52ab05d6f446640e80a255196fa0ef404b3a9a4f419442102099a935cecad84d9e83e23c0ba967dd4a42e478f248ed4cc836ea01f6d3a85a448c"]) r3 = gettid() r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r5 = dup(r1) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000340)=r5) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) write$P9_RLOCK(r4, &(0x7f0000000440)={0x8, 0x35, 0x2, 0x4}, 0x8) r8 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x7f) perf_event_open(&(0x7f00000004c0)={0x3, 0x70, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x4, 0x40000, 0x8, 0x7fff, 0x2, 0x8db0, 0x0, 0xb42, 0x2, 0x9, 0xe0, 0x3, 0xa95, 0x200, 0xffffffff, 0x3, 0x84da, 0x4, 0xa7, 0x1, 0xffff, 0x3, 0x3, 0x80000000, 0xffffffffffffff81, 0x3f, 0x8, 0x40, 0x4, 0x5, 0x80, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x7fffffff, 0xb4}, 0x9, 0xc189, 0x100000000, 0x5, 0x0, 0xffffffff, 0x5}, r3, 0x9, r0, 0x8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$BLKGETSIZE64(r10, 0x80081272, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x1d, &(0x7f0000000300)={0x4, 0x4, 0x8000, 0x4, 0x10001}, 0x14) ioctl$TUNSETIFINDEX(r9, 0x400454da, &(0x7f0000000040)=r11) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) [ 643.546591][T28971] kobject: 'rose0': free name [ 643.552098][ T3877] kobject: 'loop3' (000000004594399f): kobject_uevent_env [ 643.570678][ T3877] kobject: 'loop3' (000000004594399f): fill_kobj_path: path = '/devices/virtual/block/loop3' 07:04:24 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0xff}, 0x0, @in=@empty, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffff8}}, 0xe8) [ 643.635078][ T3877] kobject: 'loop4' (000000005d7c360e): kobject_uevent_env [ 643.662553][ T3877] kobject: 'loop4' (000000005d7c360e): fill_kobj_path: path = '/devices/virtual/block/loop4' 07:04:24 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0xff}, 0x0, @in=@empty, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffff8}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 07:04:24 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b0000f4afd7030a7c", 0x12, 0x0, 0x0, 0x0) [ 643.712315][ T3877] kobject: 'loop2' (000000002f494fe8): kobject_uevent_env [ 643.740669][T29018] kobject: 'rose0' (0000000042290baf): kobject_add_internal: parent: 'net', set: 'devices' [ 643.753305][ T3877] kobject: 'loop2' (000000002f494fe8): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 643.777729][T29018] kobject: 'rose0' (0000000042290baf): kobject_uevent_env [ 643.792516][ T3877] kobject: 'loop5' (0000000003144f8b): kobject_uevent_env [ 643.805907][ T3877] kobject: 'loop5' (0000000003144f8b): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 643.818784][T29018] kobject: 'rose0' (0000000042290baf): fill_kobj_path: path = '/devices/virtual/net/rose0' [ 643.834116][T29018] kobject: 'queues' (000000004b730bf5): kobject_add_internal: parent: 'rose0', set: '' [ 643.847305][T29018] kobject: 'queues' (000000004b730bf5): kobject_uevent_env [ 643.856064][ T3877] kobject: 'loop0' (00000000da4131ed): kobject_uevent_env [ 643.862691][T29018] kobject: 'queues' (000000004b730bf5): kobject_uevent_env: filter function caused the event to drop! [ 643.887416][ T3877] kobject: 'loop0' (00000000da4131ed): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 643.899008][T29018] kobject: 'rx-0' (00000000565a74d3): kobject_add_internal: parent: 'queues', set: 'queues' 07:04:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x1fe, 0x3fffffffffe) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a40000000000"], 0x6) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = getpid() llistxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340)=""/148, 0x94) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(r2, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) setrlimit(0x4, &(0x7f0000000080)={0x2}) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f00000000c0)={@remote, @loopback}, &(0x7f00000001c0)=0xc) creat(&(0x7f0000000100)='./file1\x00', 0x0) 07:04:25 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, &(0x7f0000000280)={0xb05, 0x0, 0xfbb662e7646498a6, 0x1, 0x88, 0x1, 0x468e, 0x100000000, 0xffffffff, 0x6}, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]) r3 = gettid() r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r5 = dup(r1) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000340)=r5) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1000aa8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffffd) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x282080, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) write$P9_RLOCK(r4, &(0x7f0000000440)={0x8, 0x35, 0x2, 0x4}, 0x8) r8 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x7f) perf_event_open(&(0x7f00000004c0)={0x3, 0x70, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x4, 0x40000, 0x8, 0x7fff, 0x2, 0x8db0, 0x0, 0xb42, 0x2, 0x9, 0xe0, 0x3, 0xa95, 0x200, 0xffffffff, 0x3, 0x84da, 0x4, 0xa7, 0x1, 0xffff, 0x3, 0x3, 0x80000000, 0xffffffffffffff81, 0x3f, 0x8, 0x40, 0x4, 0x5, 0x80, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x7fffffff, 0xb4}, 0x9, 0xc189, 0x100000000, 0x5, 0x0, 0xffffffff, 0x5}, r3, 0x9, r0, 0x8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2100, 0x0) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$BLKGETSIZE64(r10, 0x80081272, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x1d, &(0x7f0000000300)={0x4, 0x4, 0x8000, 0x4, 0x10001}, 0x14) ioctl$TUNSETIFINDEX(r9, 0x400454da, &(0x7f0000000040)=r11) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) 07:04:25 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0xff}, 0x0, @in=@empty, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffff8}}, 0xe8) 07:04:25 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0xff}, 0x0, @in=@empty, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffff8}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 643.907201][ T3877] kobject: 'loop3' (000000004594399f): kobject_uevent_env [ 643.909627][T29018] kobject: 'rx-0' (00000000565a74d3): kobject_uevent_env [ 643.923706][T29018] kobject: 'rx-0' (00000000565a74d3): fill_kobj_path: path = '/devices/virtual/net/rose0/queues/rx-0' [ 643.928175][ T3877] kobject: 'loop3' (000000004594399f): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 643.935648][T29018] kobject: 'tx-0' (0000000091e01b83): kobject_add_internal: parent: 'queues', set: 'queues' [ 643.949042][ T3877] kobject: 'loop2' (000000002f494fe8): kobject_uevent_env [ 643.985713][ T3877] kobject: 'loop2' (000000002f494fe8): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 643.990032][T29018] kobject: 'tx-0' (0000000091e01b83): kobject_uevent_env [ 643.999194][ T3877] kobject: 'loop1' (000000008bb5050f): kobject_uevent_env [ 644.011035][ T7942] kobject: 'loop1' (000000008bb5050f): kobject_uevent_env [ 644.014088][ T3877] kobject: 'loop1' (000000008bb5050f): fill_kobj_path: path = '/devices/virtual/block/loop1' 07:04:25 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0xff}, 0x0, @in=@empty, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffff8}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 644.020251][ T7942] kobject: 'loop1' (000000008bb5050f): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 644.030581][ T3877] kobject: 'loop5' (0000000003144f8b): kobject_uevent_env [ 644.046652][T29018] kobject: 'tx-0' (0000000091e01b83): fill_kobj_path: path = '/devices/virtual/net/rose0/queues/tx-0' [ 644.049082][ T3877] kobject: 'loop5' (0000000003144f8b): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 644.073173][ T3877] kobject: 'loop5' (0000000003144f8b): kobject_uevent_env [ 644.078348][T29018] kobject: 'batman_adv' (000000007a3b03f9): kobject_add_internal: parent: 'rose0', set: '' [ 644.093135][ T3877] kobject: 'loop5' (0000000003144f8b): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 644.115274][ T3877] kobject: 'loop1' (000000008bb5050f): kobject_uevent_env [ 644.128419][T29040] kobject: 'loop1' (000000008bb5050f): kobject_uevent_env [ 644.137640][T29014] kobject: 'batman_adv' (000000007a3b03f9): kobject_uevent_env [ 644.144789][ T3877] kobject: 'loop1' (000000008bb5050f): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 644.153331][T29040] kobject: 'loop1' (000000008bb5