6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

[ 2725.084528][T27679] XFS (loop5): Invalid superblock magic number
13:22:55 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:22:55 executing program 5:
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
r3 = accept$inet(r0, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000180)=0x10)
write$binfmt_aout(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="0daeda84e40c7c68d8f8091b087e7613780bf8a73c2babd7bea2786abf075f9b5fcd67837abec356fbab9e"], 0x2b)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz0\x00', 0x200002, 0x0)
ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{0x5, 0x7}, {0x7fffffff}, {0x0, 0x8000}]})
unlink(&(0x7f0000001e00)='./bus\x00')
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x12, 0x8080fffffffe)
getpeername$packet(r3, 0x0, &(0x7f0000000340))
mkdir(&(0x7f0000001540)='./file0\x00', 0x0)
write$P9_ROPEN(r0, &(0x7f00000001c0)={0x18, 0x71, 0x2, {{0x4, 0x0, 0x3}, 0x1f}}, 0x18)
mlockall(0x0)

13:22:56 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:22:56 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

[ 2725.320814][T27823] REISERFS warning (device loop3): super-6504 reiserfs_getopt: the option "grpjquota" requires an argument
[ 2725.320814][T27823] 
[ 2725.443922][T27836] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2725.451253][T27800] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500)
[ 2725.468048][T27836] FAT-fs (loop5): Filesystem has been set read-only
[ 2725.472297][T27800] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500)
[ 2725.493967][T27836] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2725.521452][    C1] net_ratelimit: 23 callbacks suppressed
[ 2725.521460][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2725.532987][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2725.563166][T27840] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
13:22:56 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:22:56 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

13:22:56 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:22:56 executing program 5:
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
r3 = accept$inet(r0, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000180)=0x10)
write$binfmt_aout(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="0daeda84e40c7c68d8f8091b087e7613780bf8a73c2babd7bea2786abf075f9b5fcd67837abec356fbab9e"], 0x2b)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz0\x00', 0x200002, 0x0)
ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{0x5, 0x7}, {0x7fffffff}, {0x0, 0x8000}]})
unlink(&(0x7f0000001e00)='./bus\x00')
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x12, 0x8080fffffffe)
getpeername$packet(r3, 0x0, &(0x7f0000000340))
mkdir(&(0x7f0000001540)='./file0\x00', 0x0)
write$P9_ROPEN(r0, &(0x7f00000001c0)={0x18, 0x71, 0x2, {{0x4, 0x0, 0x3}, 0x1f}}, 0x18)
mlockall(0x0)

[ 2725.841456][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2725.847334][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2725.853173][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2725.858920][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2725.864688][    C1] protocol 88fb is buggy, dev hsr_slave_1
13:22:56 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

[ 2726.072261][T27868] REISERFS warning (device loop3): super-6504 reiserfs_getopt: the option "grpjquota" requires an argument
[ 2726.072261][T27868] 
[ 2726.114314][T27879] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2726.126116][T27879] FAT-fs (loop5): Filesystem has been set read-only
[ 2726.128061][T27851] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500)
[ 2726.143431][T27851] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500)
13:22:56 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2)
setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000100)={0x0, 0x100000001, 0x20, 0x1ff}, 0x8)
tkill(r2, 0x1000000000013)

13:22:56 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:22:56 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000009c0)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e330897501f9007b6b482550829e022b8753a188748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637ce0080b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3d009d308bd73f47725390000000000000000000000000000000000000000000000195e23", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000280)='\x00', 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r1, r2}, &(0x7f0000000700)=""/243, 0xf3, &(0x7f0000000040)={&(0x7f0000000580)={'streebog256-generic\x00'}})

13:22:56 executing program 5:
socket$alg(0x26, 0x5, 0x0)
inotify_init1(0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r3=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

13:22:57 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x11)

[ 2726.241487][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2726.247340][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2726.253176][    C0] protocol 88fb is buggy, dev hsr_slave_0
13:22:57 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x11)

13:22:57 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000009c0)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e330897501f9007b6b482550829e022b8753a188748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637ce0080b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3d009d308bd73f47725390000000000000000000000000000000000000000000000195e23", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000280)='\x00', 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r1, r2}, &(0x7f0000000700)=""/243, 0xf3, &(0x7f0000000040)={&(0x7f0000000580)={'streebog256-generic\x00'}})

13:22:57 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:22:57 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x11)

13:22:57 executing program 4:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x2})

13:22:57 executing program 5:
socket$alg(0x26, 0x5, 0x0)
inotify_init1(0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r3=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

13:22:57 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:22:57 executing program 1:
r0 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000000), 0x11)

13:22:57 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123d123f3188b070")
syz_mount_image$ntfs(&(0x7f0000000880)='ntfs\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800, &(0x7f0000001380)={[{@errors_continue='errors=continue'}, {@disable_sparse_no='disable_sparse=no'}, {@case_sensitive_no='case_sensitive=no'}, {@uid={'uid'}}, {@errors_continue='errors=continue'}, {@errors_remount='errors=remount-ro'}], [{@fsuuid={'fsuuid'}}, {@context={'context', 0x3d, 'system_u'}}, {@fowner_eq={'fowner'}}]})

13:22:57 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x52000)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="411b9e0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x24)

13:22:58 executing program 1:
r0 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000000), 0x11)

[ 2727.206450][T28061] ntfs: (device loop4): parse_options(): Unrecognized mount option fsuuid.
13:22:58 executing program 4:
socket$alg(0x26, 0x5, 0x0)
inotify_init1(0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000240))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

13:22:58 executing program 1:
r0 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000000), 0x11)

13:22:58 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:22:58 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:22:58 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:22:58 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000040)=""/28, 0x1c)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r1, 0x5, &(0x7f0000000200)="0d541f124d692fddb69f82")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:22:58 executing program 4:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
io_setup(0x3, &(0x7f0000000200)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])
io_submit(r1, 0x1, &(0x7f0000000980)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x0, 0x1ff}])
ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100))

13:22:58 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:22:58 executing program 5:
socket$alg(0x26, 0x5, 0x0)
inotify_init1(0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r3=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

13:22:58 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:22:58 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:22:58 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:22:58 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:22:58 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(0x0, 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:22:58 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={[{@fat=@dmask={'dmask'}}]})

[ 2728.262041][T28452] FAT-fs (loop4): bogus number of reserved sectors
[ 2728.269143][T28452] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 2728.330861][T28452] FAT-fs (loop4): bogus number of reserved sectors
[ 2728.337755][T28452] FAT-fs (loop4): Can't find a valid FAT filesystem
13:22:59 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:22:59 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(0x0, 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:22:59 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGKEY(r0, 0x80404518, 0x0)

13:22:59 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/video2\x00', 0x2, 0x0)
timer_settime(0x0, 0x800, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
ptrace$pokeuser(0x6, r2, 0x80000000, 0x8003)
r3 = syz_open_dev$mouse(&(0x7f0000000280)='/dev/input/mouse#\x00', 0x100, 0x0)
unlinkat(r3, &(0x7f0000000300)='./file0\x00', 0x200)
sched_setattr(r2, &(0x7f0000000400)={0x30, 0x5, 0x1, 0x3, 0x100, 0x0, 0x100000001, 0x10001}, 0x0)
tkill(r2, 0x1000000000013)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x60000, 0x0)
ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000000100))

13:22:59 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:22:59 executing program 5:
socket$alg(0x26, 0x5, 0x0)
inotify_init1(0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r3=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

13:22:59 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(0x0, 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:22:59 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:22:59 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, &(0x7f0000000840)=[@text64={0x40, &(0x7f00000007c0)="b9800000c00f3235000100000f300f01c83e0ff382610000008f68e4a20f0cf3abf044804304f4450f01cab900010040b8245cb3bcba08bfe5370f300f986706b9800000c00f3235000100000f30", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:22:59 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:22:59 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:22:59 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, 0x0, 0x0)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:23:00 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:00 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, 0x0, 0x0)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:23:00 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, &(0x7f0000000840)=[@text64={0x40, &(0x7f00000007c0)="b9800000c00f3235000100000f300f01c83e0ff382610000008f68e4a20f0cf3abf044804304f4450f01cab900010040b8245cb3bcba08bfe5370f300f986706b9800000c00f3235000100000f30", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:23:00 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x8ad0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x401, 0x0, 0x3553800000, 0x7f})
r0 = socket(0xa, 0x3, 0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xfffffffffffff801}, 0x0)
semget$private(0x0, 0x4, 0x10)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'bridge0\x00\x00\x00\x02k\x00'})

13:23:00 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:00 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000100)={{}, 0x0, 0x0, 0x0, {0x7}})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

[ 2729.870753][T28624] bridge0: port 2(bridge_slave_1) entered disabled state
13:23:00 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, 0x0, 0x0)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:23:00 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[], 0x0)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:23:01 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[], 0x0)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:23:01 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, &(0x7f0000000840)=[@text64={0x40, &(0x7f00000007c0)="b9800000c00f3235000100000f300f01c83e0ff382610000008f68e4a20f0cf3abf044804304f4450f01cab900010040b8245cb3bcba08bfe5370f300f986706b9800000c00f3235000100000f30", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:23:01 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[], 0x0)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:23:01 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:23:01 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00000000000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:01 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:23:01 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, &(0x7f0000000840)=[@text64={0x40, &(0x7f00000007c0)="b9800000c00f3235000100000f300f01c83e0ff382610000008f68e4a20f0cf3abf044804304f4450f01cab900010040b8245cb3bcba08bfe5370f300f986706b9800000c00f3235000100000f30", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:23:01 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x8ad0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x401, 0x0, 0x3553800000, 0x7f})
r0 = socket(0xa, 0x3, 0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xfffffffffffff801}, 0x0)
semget$private(0x0, 0x4, 0x10)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'bridge0\x00\x00\x00\x02k\x00'})

13:23:01 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:01 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x773, 0x10000)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000008}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x24, r4, 0x300, 0x70bd29, 0x25dfdbfd, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0xfff}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
tkill(r2, 0x1000000000013)
r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x280, 0x0)
ioctl$KVM_DEASSIGN_PCI_DEVICE(r5, 0x4040ae72, &(0x7f0000000100)={0x8, 0x2, 0x6, 0x3, 0x80})

13:23:01 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:23:02 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed"], 0x4)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:23:02 executing program 5:
socket$inet_udplite(0x2, 0x2, 0x88)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00'}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x5, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'icmp6\x00'}, &(0x7f0000000180)=0x1e)
pipe(&(0x7f0000000880)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x10000014c)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x10000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

13:23:02 executing program 4:

13:23:02 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed"], 0x4)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:23:02 executing program 4:

[ 2731.761427][    C1] net_ratelimit: 23 callbacks suppressed
[ 2731.761435][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2731.772889][    C1] protocol 88fb is buggy, dev hsr_slave_1
13:23:02 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:02 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed"], 0x4)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:23:02 executing program 4:

13:23:02 executing program 5:
socket$inet_udplite(0x2, 0x2, 0x88)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00'}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x5, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'icmp6\x00'}, &(0x7f0000000180)=0x1e)
pipe(&(0x7f0000000880)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x10000014c)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x10000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[ 2732.081430][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2732.087357][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2732.093211][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2732.099009][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2732.104783][    C1] protocol 88fb is buggy, dev hsr_slave_1
13:23:02 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:02 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
write$9p(r1, &(0x7f00000014c0)="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", 0xff)
r2 = gettid()
timer_create(0x3, &(0x7f0000000280)={0x0, 0xf, 0x1, @thr={&(0x7f0000000400)="d513eb3d8a4eaebc5e8f56abe720f0e24e4a8d5b75e9363165e07546c6b778dbc1556c2f7899450f0a119339f207bc7f9cc76f80d0140c084b2fdee0e4c30d06a3590c7862c277288c8bb659b294112b3779b30693ffcbcd62b6fcab6d1d72618a3ea99c1919d9e64d015c54eeebf86e1738d850ce17dc0a91583d86380902f1c96315d1ef3a0c8e2697e25d68fc65793cfa157d923c5fc27e86892c157f3bca4323cab3fcf8ec1e004fdbd7be4c8cca016e3d60968dcb8dbb686f35b7fe9f66", &(0x7f00000004c0)="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"}}, &(0x7f0000000300))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)
r3 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x33b, 0x40)
ioctl$KDENABIO(r3, 0x4b36)

13:23:02 executing program 4:

13:23:02 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003"], 0x6)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:23:03 executing program 4:

13:23:03 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003"], 0x6)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:23:03 executing program 4:

13:23:03 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003"], 0x6)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

[ 2732.481427][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2732.487352][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2732.493603][    C0] protocol 88fb is buggy, dev hsr_slave_0
13:23:03 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:03 executing program 4:

13:23:03 executing program 1:
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r0 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000000), 0x11)

13:23:03 executing program 5:
socket$inet_udplite(0x2, 0x2, 0x88)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00'}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x5, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'icmp6\x00'}, &(0x7f0000000180)=0x1e)
pipe(&(0x7f0000000880)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x10000014c)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x10000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

13:23:03 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:06 executing program 1:
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r0 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000000), 0x11)

13:23:06 executing program 4:

13:23:06 executing program 5:
socket$inet_udplite(0x2, 0x2, 0x88)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00'}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x5, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'icmp6\x00'}, &(0x7f0000000180)=0x1e)
pipe(&(0x7f0000000880)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x10000014c)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x10000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

13:23:06 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:06 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/audio\x00', 0x20000, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000400)='/dev/snd/pcmC#D#p\x00', 0x5, 0x80002)
ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000440)={0x7, 0x3, 0x4, 0x80000, {0x77359400}, {0x2, 0x2, 0x9, 0x3ea, 0x0, 0x2, "e937a885"}, 0x8000000000000000, 0x2, @fd=r2, 0x4})
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f00000004c0))
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r4 = gettid()
r5 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8)
add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r5)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)=<r6=>0x0)
clock_gettime(0x0, &(0x7f0000000040)={<r7=>0x0, <r8=>0x0})
timer_settime(r6, 0x0, &(0x7f0000000240)={{}, {r7, r8+10000000}}, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000500)={0x1, [0xffff]}, &(0x7f0000000540)=0x6)
tkill(r4, 0x1000000000013)

13:23:06 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:06 executing program 4:

13:23:06 executing program 1:
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r0 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000000), 0x11)

13:23:06 executing program 4:

13:23:06 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x11)

13:23:06 executing program 4:

13:23:06 executing program 4:

13:23:06 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x11)

13:23:06 executing program 4:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1e80730000000000000000000008000000008ff1ac460000000000001c0000004e2311b580fbf902bf40e2ce65d65759f358dc1ab7332d0ef55ec2"], 0x3b)
mount(&(0x7f0000000040)=@md0='/dev/md0\x00', 0x0, &(0x7f00000000c0)='squashfs\x00', 0x2072004, 0x0)
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)

13:23:06 executing program 5:
socket(0x0, 0x2, 0x0)
r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000440)="432232672199de8d41ce443e6e93f0b32b7b9ba779f93aac89b90f046893a49bbc7bc182719ded22bc76ec994a929f8d4fed88298a153a983a879cdfa7e5551c54284307466b88bf897d022a21a96afac9ef231febc798dad3a3", 0x5a)
ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0)
shmget(0x3, 0x1000, 0x6, &(0x7f0000ffc000/0x1000)=nil)
write$cgroup_int(r1, &(0x7f0000000080), 0x297ef)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))

[ 2735.706292][T29052] attempt to access beyond end of device
[ 2735.712384][T29052] loop4: rw=2049, want=130, limit=112
13:23:07 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

[ 2738.001458][    C1] net_ratelimit: 23 callbacks suppressed
[ 2738.001468][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2738.012921][    C1] protocol 88fb is buggy, dev hsr_slave_1
13:23:09 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
mknod$loop(&(0x7f0000000140)='./file1\x00', 0x6003, 0x1)
r1 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x0)
capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000240))
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
open(&(0x7f0000000040)='./file0\x00', 0x20000, 0xb)
r3 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x800, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, &(0x7f0000000100))
tkill(r3, 0x1000000000013)

13:23:09 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x11)

13:23:09 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000380)=""/167, 0xa7}], 0x1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
open(0x0, 0x400000, 0x40)
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='status\x00')
preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0)
setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(0x0)

13:23:09 executing program 5:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unshare(0x40000000)
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0xbffd)
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000340)={0x2})
write$P9_RREADDIR(r0, 0x0, 0xfffffffffffffec9)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000240))
statx(0xffffffffffffffff, &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
accept(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000300))
stat(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000440))
open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0)
epoll_create(0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x2)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000002c0)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15)

13:23:09 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:09 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

[ 2738.321468][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2738.327368][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2738.333237][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2738.339019][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2738.344810][    C1] protocol 88fb is buggy, dev hsr_slave_1
13:23:09 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, 0x0, 0x11)

[ 2738.404243][T29187] IPVS: ftp: loaded support on port[0] = 21
[ 2738.498318][T29187] IPVS: ftp: loaded support on port[0] = 21
13:23:09 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000100)=@srh, 0x8)
setsockopt$inet6_buf(r1, 0x29, 0x3b, 0x0, 0x0)

13:23:09 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, 0x0, 0x11)

[ 2738.564033][T29303] Unknown ioctl 21383
13:23:09 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000280))
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000380)={0x0, <r2=>0x0})
capset(&(0x7f00000003c0)={0x0, r2}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
fcntl$getownex(r1, 0x10, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:09 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, 0x0, 0x11)

13:23:09 executing program 4:

[ 2738.721436][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2738.727348][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2738.733183][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2739.023564][   T26] audit: type=1804 audit(1551100989.787:72): pid=29317 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir439270579/syzkaller.XZeVcN/3679/file0/file0" dev="loop5" ino=18 res=1
[ 2739.066765][   T26] audit: type=1804 audit(1551100989.807:73): pid=29325 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir439270579/syzkaller.XZeVcN/3679/file0/file0" dev="loop5" ino=18 res=1
[ 2739.104889][T29323] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2739.115435][T29323] FAT-fs (loop5): Filesystem has been set read-only
[ 2739.294722][T29272] Unknown ioctl 21383
13:23:10 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf, @tick, 0x0, {}, 0x81})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x40000, 0x0)
clock_gettime(0x0, &(0x7f0000000100))
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x3d)

13:23:10 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x0)

13:23:10 executing program 4:

13:23:10 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:10 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:10 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000280))
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000380)={0x0, <r2=>0x0})
capset(&(0x7f00000003c0)={0x0, r2}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
fcntl$getownex(r1, 0x10, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:10 executing program 4:

13:23:10 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x0)

13:23:10 executing program 4:

13:23:10 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)
listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000400)=""/183, 0xb7)

13:23:10 executing program 4:

13:23:10 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x0)

13:23:10 executing program 1:

13:23:10 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000400)={0x2, 0x4e01}, 0x45)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000008003, 0x80000001}, 0x14)
shutdown(r0, 0x1)

13:23:10 executing program 1:
seccomp(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x20000000006, 0x0, 0x0, 0xfffffffffffffffb}]})
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x5000)

13:23:11 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:11 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:11 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000280))
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000380)={0x0, <r2=>0x0})
capset(&(0x7f00000003c0)={0x0, r2}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
fcntl$getownex(r1, 0x10, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:11 executing program 4:
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, 0x0, 0x0)
bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @broadcast}, 0x10)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10)

13:23:11 executing program 1:
mkdir(&(0x7f0000632000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$tipc(0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='cpuset\x00', 0x0, 0x0)

[ 2740.510899][ T7497] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2740.538791][ T7497] FAT-fs (loop5): Filesystem has been set read-only
13:23:11 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000001640)=ANY=[], 0xf5aab446)

13:23:11 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x80)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280)={<r2=>0xffffffffffffffff}, 0x113, 0x3}}, 0x20)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x300)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000400)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x6, r2, 0x30, 0x0, @in={0x2, 0x4e23, @loopback}}}, 0xa0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
sendmsg$nl_crypto(r3, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)=@upd={0xf8, 0x12, 0x400, 0x70bd2d, 0x25dfdbff, {{'ctr-blowfish-asm\x00'}, [], [], 0x2400, 0x400}, [{0x8, 0x1, 0x7fff}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0x8}]}, 0xf8}}, 0x20000000)
r4 = fcntl$getown(r3, 0x9)
syz_open_procfs(r4, &(0x7f0000000040)='cpuset\x00')
ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r5 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r5, 0x1000000000013)

13:23:11 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000001640)=ANY=[], 0xf5aab446)

13:23:11 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = dup3(r1, r0, 0x0)
write$P9_RFLUSH(r2, 0x0, 0x0)

13:23:11 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = gettid()
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, r1)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, 0x0)

13:23:11 executing program 4:
perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
socket(0x0, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x7, 0x0)

13:23:12 executing program 1:
bind$inet(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x0, @broadcast}, 0x10)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f00000031c0), 0x0, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000180), 0x10)
getdents(0xffffffffffffffff, 0x0, 0x0)

13:23:12 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:12 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:12 executing program 4:
seccomp(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x20000000006, 0x0, 0x0, 0xfffffffffffffffb}]})
r0 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)

13:23:12 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000280))
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000380)={0x0, <r2=>0x0})
capset(&(0x7f00000003c0)={0x0, r2}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
fcntl$getownex(r1, 0x10, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

[ 2741.418559][ T7497] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
13:23:12 executing program 1:
seccomp(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x20000000006, 0x0, 0x0, 0xfffffffffffffffb}]})
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
lchown(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)

[ 2741.449409][   T26] audit: type=1326 audit(1551100992.207:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30462 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0xffff0000
[ 2741.459509][ T7497] FAT-fs (loop5): Filesystem has been set read-only
[ 2741.495071][T30469] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[ 2741.516850][T30469] __nla_parse: 2 callbacks suppressed
[ 2741.516858][T30469] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2741.538650][   T26] audit: type=1326 audit(1551100992.297:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30471 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0xffff0000
[ 2741.553047][T30469] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[ 2741.591452][T30469] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
13:23:12 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
delete_module(&(0x7f0000000180)='\x00', 0xa00)
r0 = socket$inet6(0xa, 0xb, 0x400000000000000)
setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000140)=0xfffffffffffffffb, 0x4)
r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)="765cd7806d8bc164b309bbd86519b14047076fa5f533bdde8a9684e650422e24374ea7d45167e414fc555af495a1164d6f3bd0e5ad9ae47b06b3b83a478de1a5d1bb1fef942a9d90a98dcbe9185248c8b54c154ada3993f96166758a743bd48817e6", 0x62, 0xfffffffffffffffb)
keyctl$setperm(0x5, r1, 0x8)

13:23:12 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x12b, @tick, 0x0, {0x0, 0x2}, 0x0, 0x0, 0x20})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:12 executing program 4:
r0 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0)
ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f)
sched_setaffinity(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$inet_mreqn(r0, 0x0, 0x27, 0x0, &(0x7f0000000100))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
fstat(0xffffffffffffffff, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
getuid()
sendmsg$nl_netfilter(r1, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000340)={0x30, 0xc, 0x0, 0xc15, 0x0, 0x25dfdbfd, {0x7}, [@nested={0x1c, 0x94, [@generic="add6896a80d7", @typed={0x8, 0x35, @fd}, @typed={0x8, 0x85, @ipv4=@remote}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0xc091)
connect$packet(r0, &(0x7f0000000140)={0x11, 0x18, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14)
recvmmsg(r0, &(0x7f0000001380), 0x4000056, 0x3a, &(0x7f0000000200)={0x77359400})

[ 2741.938961][T30701] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[ 2741.951972][T30701] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2741.964352][T30701] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[ 2741.972779][T30701] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2741.988479][T30701] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[ 2741.997713][T30701] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2742.010340][T30701] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[ 2742.019583][T30701] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2742.031063][T30701] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[ 2742.040021][T30701] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2742.054743][T30701] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[ 2742.064212][T30701] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2742.075585][T30701] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[ 2742.084572][T30701] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2742.099034][T30701] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[ 2742.108824][T30701] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
13:23:12 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000280))
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000380)={0x0, <r2=>0x0})
capset(&(0x7f00000003c0)={0x0, r2}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
fcntl$getownex(r1, 0x10, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

[ 2742.236728][ T7497] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2742.249935][ T7497] FAT-fs (loop5): Filesystem has been set read-only
13:23:13 executing program 4:
r0 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0)
ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f)
sched_setaffinity(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$inet_mreqn(r0, 0x0, 0x27, 0x0, &(0x7f0000000100))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
fstat(0xffffffffffffffff, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
getuid()
sendmsg$nl_netfilter(r1, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000340)={0x30, 0xc, 0x0, 0xc15, 0x0, 0x25dfdbfd, {0x7}, [@nested={0x1c, 0x94, [@generic="add6896a80d7", @typed={0x8, 0x35, @fd}, @typed={0x8, 0x85, @ipv4=@remote}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0xc091)
connect$packet(r0, &(0x7f0000000140)={0x11, 0x18, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14)
recvmmsg(r0, &(0x7f0000001380), 0x4000056, 0x3a, &(0x7f0000000200)={0x77359400})

[ 2742.333470][   T26] audit: type=1326 audit(1551100993.097:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30471 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0xffff0000
13:23:13 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:13 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:13 executing program 4:
seccomp(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xfffffffffffffffb}]})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

13:23:13 executing program 1:
r0 = syz_open_procfs(0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x4, 0x4)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
syz_extract_tcp_res$synack(&(0x7f0000000100), 0x1, 0x0)
ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000180)=0x2)
connect(r1, &(0x7f0000000240)=@pptp={0x18, 0x2, {0x3}}, 0x80)
fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000080))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xffd8)
sched_rr_get_interval(0x0, &(0x7f00000001c0))
sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0)

[ 2742.560213][   T26] audit: type=1326 audit(1551100993.317:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30930 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0xffff0000
13:23:13 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000280))
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000380)={0x0, <r2=>0x0})
capset(&(0x7f00000003c0)={0x0, r2}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
fcntl$getownex(r1, 0x10, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:13 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100))
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:14 executing program 1:
seccomp(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xfffffffffffffffb}]})
r0 = shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x5000)
shmdt(r0)

13:23:14 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00000000000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

[ 2743.366094][   T26] audit: type=1326 audit(1551100994.127:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30930 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0xffff0000
13:23:14 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

[ 2743.458645][   T26] audit: type=1326 audit(1551100994.217:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31064 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0xffff0000
13:23:14 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="b9800000c00f3235000400000f3066b832010f00d02e660f38824b800f01b700000000b99c0300000f32b80f0000000f23c00f21f83501000b000f23f866bad104edc4c245bebd01000000650fc79d0400000066baa100ec", 0x58}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0)

13:23:14 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000280))
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000380)={0x0, <r2=>0x0})
capset(&(0x7f00000003c0)={0x0, r2}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
fcntl$getownex(r1, 0x10, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:14 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)
r3 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x7fff, 0x0)
accept4$nfc_llcp(r3, &(0x7f0000000100), &(0x7f0000000280)=0x60, 0x80000)

[ 2743.792971][ T7497] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2743.811886][ T7497] FAT-fs (loop5): Filesystem has been set read-only
13:23:14 executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x6c, 0x20000008003, 0x20000000000001, 0x0, 0x0}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001400)={r0, &(0x7f0000001380), 0x0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001100)={r0, &(0x7f0000000080)="608268d507e99bfcb7825091bfdedda146aa777d8fed5fcbc876fd0e5304d04fd6f7b5a94e672550922fefc533e4a71b3bc52320a9b57e6675bc86d8a4b50943d9ffefe1e9e3c46fc3dfe01e4d9915fc3940b5a7b8b57fd99b9d9763842603231dc2e9ad845e31325f1976246d56df41554945ccd5adc5d6e262ab8dcd26ab37b6a7310318ed4bb209f0a049696911de806c9ef01549f3869ac64c994f8f872f7b8287db6507960e7a43ad4cd955c1c15f2428473b58658e2760109dd208d26e93b6729221a10273dc1ce50e4d2eb631169a23626a4dc824f6e46ef7a06cdcd2a2565f47538c6591024368caa2f92e5ae7ac798e2362b35c8edc53c560764b89fa0a838f8df4a4b4e57564bfc1d5bd3b4544eb207eb5adaf30e55324d66a0adafb3aef7c83b265bf549198f8efad903790d66da92352f232301ab7bb7975b88071015f604343050ab78da3121e259dcfa31c3d049dbfe79919a32610c4dec383f257fb394e2c41f288bb253263b38fecc5f15ba4ad9cff50b0da2b745a59d61ee7429a6e8c4f204370610d48f07e3fa6dd79c49fe1c1db458528111ede4a4e02ff261b6e8490e4282c625049dca84e8882ce36f87e26864d82c9d27818370aea3c71d3eec9590b0b781510825281883246813e0bd5c4e34f5b6b7816cf8af2f90f71d1125ee0e0289a53b9b5ac62ec1bb09d47b9edf7693b803a2ecfe4fbe5374f641968f52a056b11f7cdd080f824c291b67c40fc01dfec32aac1721748f55d8328e00f5d0879e2cbc48d85ba53d311efc1649c2938452492f170a0b69f4223875d3b33bf46970218cc22c72f2620d869775ca4d766739efdf00d39dbb935fd510cf144ed38bc9f1b6a35e6efa27f092d69d58b26aef8096985ca7837340366e37b9ba90cd2ec91809fa05e58027412e40b6344240bb59500f639b1fdfac219a5cd5bad82a5309e2466465eb7f3478742b5cdd324036980c6c4c6d470e0cc6b4a6b7bbb56b058e667f8ed3fcef8796034823da89b8e30ed6e23a2dda9feb93ed9788457f92076ed40fcb4e180e0687366ad62e75c51667beee6ec08443392689d3779adc08405e37f2e870724a5bc445c77ab55c15bb92dcc2295a0d95267b77804499ee1fe74bb0817b90ea0ce7a0bf7a68a4b5c252d70c73abb2ef1962575684e09b8298eca4867fbbc1399e5fa29cf00eb5e9672a326df6b91823e7ab01be3ec07ea987c1b591461b0cf0f99f47a413c2c70fa9be7ec846f8e0b50f97c7a441de6583e8c6d4d9b017eb926c86b933c5124befcfe041dac375b1ad41183e614436ca68829156c22a30958d79ac96635e3d1f86c6a3f49414b770a3c7b7639df3eef1c0065f6f23bebf6298800cc915ca60f2858560108c1926c4898a51661a2cef1caf7bbd2a04f7b6b935ce8a496b89d186618d465fc16511a922ccee3689a811ce677417a92dd3f30c9b092bb1436d42ff8d347d287ad51a69f3f2f90f9b52f6575afcc673142dca4e7226185ad39b70f1f63c54ed027812e889993c78a7dc9b9e92b3d4dc7c380ef6790ddb1d513af07f7af92ca4b8296caa00e7e1c498de969e1889cdeb41dac3c127a623c41d2602c03eb77694d03d5d3c71804f678a2224b8a78747eb3b012f4485e240b6b3ca9ba0f9184b1003e0ca1345968ebf2f07784e30594001deacfff8a40f4eaec5e71e7440dfbc7125d30dce4110c981a722728bf31280a5ab3773266adbb85a4a3b4ca15caf86f5f7806642e5d8c66b00cf84f1bfb44e781a861f1c54b0db8fb6c051215d5ad51d297892c698e1e024a64134b9b0c48728a625cafd2867355251e685440eae1c14056a314a1a97cfd067fb18f86a92b2e397f9b907597b98fc47cf3d80103e0bad555e5b94de6dba05e26be0e093fd9b38eccdb63ae6802072d38e0b0153a92b83caeb089339b22454f0c8d5cc87bb47649790a9eef45cbc379c1393f2a3c41c9aad6b24d1565e11ab5451bfe0e015f337265bce474959210ee1e2d6da8afa6e445ed6c40e5de839973ba4561e39e5bcc19fcfa1f3b195491baf2dcd51b56a8badf897b513d04f010ced9655b80c02854dc740d00ec7e0687d9579f98225b19158fc94282835f2936c9c2890d08a137450b60f6bf8bf6c820a30131b74c1a006294b8037bc5d6cef3cd3ed9ac9a3eeb197375a1e103045784372d350cb8064b92b4d5d967ec4dfdad35640d8454a5e0d3fd2c4dcc9da1750e5aac8fdae7dcaa34efcbece3291aae1a32926dbdd0bdd5800951c07915368a7258fc3e2527dda5d5c9e0e76e8f7c4b6ba1ae54c62857b524967cdf7939c556367c233b852f0f4e3c239b20a9de1fd6c579a926aeeef6a3730c867a9a6f77ea8f546c553a61d44f305af393457d085d1d8eb7d81699e6fd6da7c6ddd4d0c39059ad23c13d107668a64fafc79b2eb9369e1fa45bbd5eb7345cd78cc58ecca04132e22e056846f72a7657b248d418f1747e29fca3291196d9cdc5a1be8ae1a76a9572727c999e8c53388417012b19f3e2bb101a8615bce01a1d4c63b88ebcbac1bb513e261db99606fe76a45286f2109c72f75f56f53ee010a6462b073f14a8d2a250e92f234e4d153f4b03917c2a2908251a52fcabd62cc42bdc51bdb12f36d3a98738a582937d0ea818927d2a073438d5d66c47da3170502f37258fb9f402d271890a0394b00918f67b39908022b6c25cb62eb2c22e5b3e87bcbe2c954197af9a426c8128b2ceb179c8f140c8804a1749b5137b5e7a3b88defc355642ad800f8a556e68ee512c9f3a1c574f106ff309df653a7f8ab8c5ecb21f594eb6e1f97db05f58e386faa081df338ad9dbf3aebaf678fe2c146aa62b9cdb1496bd6aab01629d576a4cd9b77a1fbb31e1a4696541de4fb8d36037f9586c347e363c456d859dadedf0a16c649afaa6c8b5f593adca8f94b799a6dee1eae27283a43e04f89776c997f7785157f69f6f88ae8b9e3ede9b64daf637c58693209f42c21c73f349ab274c0948c5d68e59e4e0cd8288fe2aa0e860e440c17f97821dba74812e5eb970030c79ffe07d020405108d7c06f1b007d6978e583a91dd1623c9062d2298c41d0945099a9ed98f2d53a8a155b0efb2e12daf2a52e5874fbaca896a56fe0bbc7045f438a23c201051bee4a4e5bff9ebb039aa359045075035b6fbd189d5c5298502a1c0af9a06010f4d3f032cd6b7bff6598507d17c9d138d66ad254952dd3e0f63ce398ee9bad6858f6f5914c5c7c8901a756d0432d62422e69805b267fabeee0111f5e3d7a0a0a71bfb1a64f67c0ba44109ab4f59a1c172876c568295d4e0adbd9a1fdf9e08574295bb58bc2f7877c1726dc1080f2b25bb412e13903209d3510de17394c418bf1737a16ddc1055ae5ac6ad61c628e0f4dbbc9c6e893d49b97cde0f7e9dd7c77d0d2670406691cbd1b1cf5901b7e0f02348300d4fa124d99301f105badda54fd02819b44631572abddf7005f1dfc762046b7e1059d18c83993919d332bed0f42f684d48b4728b36e092dd8dce6a128c5048774e9d98e8926b75bb3d3ee69a5efdcc6e467cf43f9822e0b4b563ef0ad88ebdce79d544c485510162dbaeb9a02d17dc7ea675a5936a26f422de2db3c97199d3bbe6b10795d4521eff8263bf30d110417a35a874a571d92429819caea8c452bf0169b2fb5e742c6afd2490a5efda80f4fd6147493150cb58abeaaf8a86c9a533562c78c26731db1418ddb99abf894ae0ec23d27cf573e7230ae141ab8e1c84f4966ddeb34995f25c48b74fcd2ac3db9ba37292013708d84d3377b65c7ec1aaf091caaf455f28419b48c7d1520fd69093d0de98eedf0274f8dbe73d7f6438706f6bdcd1b924a0d6e42b794db6b656bbe94c4c93e1cfb623819afe13f33d67764d22c1c9e2d144a6e39e568caee71590565904caa48a989a420c499579777774209675749e8c03b62c26bd5002c89906e16570cf853476677eb18d2d9340efe8e166e9fd74b150db6ce85a8169d4dac357b75fcb710180858cc83413a9c68107c73c4bbe7e3acff7dcc5e93036b5aad4a0ff049689b21e6a85f004f60c430367e6a222aa9a276f5f2e27e47898455c4f34a2b0403d8a30c2f58a85e1eb71e4ac3078f2d53a76b462e835ffc5194b2ec4a0efb0d2d52f543a3466f306a86eec356207faf427d617b596e853575465d6043face987dfbed6e9b4080ad0e17e3491d2c1e36fcaf7b35382d94f7c01982350a710d9b8e10fd3fb9c928d3f7696aa317885bad6d02b89330190189bebbbbb749cbe63285baea2f6763da00d6d9f0a5dc163a9a6ef7e1e998b47c7273bc947a08dd4dca6cbc94ae32631179c1765cc0585f1bf415c08cdb08151e44cfd87705836291a5b88aa92e3b8f9b6c493f524223aa655f8b4036cf540c9071bad07c34d760eb93ffd175db0ab9229d83b0e4367a21ad4485a0f031fcd609ebd973a5ae0e68d18c83e054e63810c54984109de2f0b1b54b7d512dd4ec178ee4511bd8226266621667bab50d88b6ad1ae6edd9eeec609a2ab31495bbf3759f698f582efe132c34f442578a170608097dede1e0a095b6b24acef1199eb0291c1a48f6bc8157ef59360643eded75d641bfa0b1e1c17e615ef8c017602304353e15b6a397145d5eb17bc0dd903d6667946751aac65ac06676ea88783ef3d3e3d0ef31d43309d2ea0fc9785f1f316757385468b7439b70b69a596cb6ca02f0fa07fcd526d21b552d184a011122b4f4b7f65d78a64febe7af7f3fd2ccd5176820f8665aba8867a7c3f71fa824c9eae018a5f8092257be4e4eb8258cc01cd89d669e22ba0d51425cd12ea5a7dd17682d15a8e32fe87233c46d08a8c798ee0ba4bdc8dbe6c1ccc36e76be6c5b856976916f68c970b92c449637124a0a14ba32d9e759a076418b13feecaa02b5d4fb3e1af3b4f03dcf9ead684546ee96b95d8cf9845f92f233a6e3fab0bac62371fd38f768873ad157417f98e70cbcdd719a0c70c5d2934463ae3bc0796e8c4bb56b13696375a8aca576fd44ccfdf3f92258f99beb9d19bdbf0b1a558f0ef4d675e6da446480df07151d5025f120fc68e394575f0c4f086deafc4e0c7e42287a69e673cc19de0f664fd9f993b0ca755cb9a452ddf641a509345d99b7dde1f4eabcfc3c7b3231df305b60648de25e56078a1e629f6c9b19a49dac508b8c1924e2116e5f3baed06f9916ddb9a178c5346624a81f8d3b5a78bba6fdf5965612b12370c7299b302a021b3913f07dd3c639bc9254bd8331e113a9ecfe03a571cb122b7fefb4fbfc84dd616a7805359c213fa3a606e80424ef9e73e36d9d1639c1cacefb9f859dceddd3b39026a795affc38274146d950864cd846b989a3d5fafd7477928f12c32de0c9811e528a9c6aa42190d1716e88f8dcf4f0dba39a1989c1305b83396f01a5597b0b9e5f90c107d9cde5e004a6f3608ed9d5b3a6754f7f37273056d10a3da0bbffba5fbc7abf6b67124fea8ceab90a3f84b2fd642758452c8b52fcf70aca726d935fdf9f2e002eb86a7d29b0c0105c2163a37355434e8dabd6a516bb75b9d7b0f3d0f8291d1725e585dbac245f4933abb5967b2232d6b9c2d65598e99cc77398d31f0b82d5951595f58df8982f4a839684cca3a0cbb464e36e6e867d34d62929ea45f1ab3c526da747d248487d2b8a1f4eeab2bcd4d65441c90cbb1e340dbd081f76e617220a1ed29963bcf7444366aab4a57053851e541c57bd80c7d848c94fcd91730e1fdaf844f78921d5590a1cce670b0c224167366d59f68c0f9c524df", 0x0}, 0x18)

13:23:14 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000280))
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000380)={0x0, <r2=>0x0})
capset(&(0x7f00000003c0)={0x0, r2}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
fcntl$getownex(r1, 0x10, &(0x7f00000002c0))
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:14 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='\x00\x00\x00\xd8\x00\xb2\x1d\xbe\v\t\x1b\xeb\xc9\x02\x12m\x88\x84\a\xc5;\x84\xed\xf3*-4\xbf%v\xf0\xa9\x00\x00')
r1 = openat$cgroup_ro(r0, &(0x7f0000000200)='mem\x00\x01y/\x06\x00\x00\x00\x00\xf2\xff\x00\x16\xd4B\xab\xe3\xfa\x00\x00\x00\x00\x00\x00\x00\bg\x89\xdb', 0x0, 0x0)
preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c)
shmat(0x0, &(0x7f0000c5b000/0x1000)=nil, 0x6000)

[ 2744.240283][   T26] audit: type=1326 audit(1551100994.997:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31064 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0xffff0000
[ 2744.271432][    C1] net_ratelimit: 23 callbacks suppressed
[ 2744.271442][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2744.282838][    C1] protocol 88fb is buggy, dev hsr_slave_1
13:23:15 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00\x00\x00\x00\x00\xdb\x88yt\xa9\xd4\xb8\x04\x9e f\x06\xa8\b\xfc\xfe=\xd3\x12\x91\xf7\x86\xce\xe9*.\xd9\xcc\x0e\xeb\x0fn\x1b!p\x05W\xd7\xd3!\xc6\x16\xf2\xa6\x9f\x97^]X\ah1\x03\xcfHQo\xd9`c`1\x93\xe1\xcc1\t\xac\x8e\xeb4\x89\xd6\xa5\xd8n\xeao\xc6j\xdcl\x927\x8dI\xe3\x9c7\x17\xdc\x01/\xceb\x80xA\\~\tFp\xfa*\xf0\x98\x11\\%\x10\xfd\xbd\\\xa6PhI\xcc\b\x04\xb6\a\xbe\x9f`.\xfb\xdd6\xd3\xbf\xe5\xdd\f\xa1\xaf', 0x200002, 0x0)
fchdir(r0)
clone(0x2000000, &(0x7f00000001c0)="8d0fe0406443d5c441450b18e82baf59613e0a23d68e46687d2086ae4c491e18be6b34", 0x0, &(0x7f0000000240), &(0x7f0000000280)="f73efcb35a1a48c073d1d67023391884f85f03d35d9fbb352f8bf3824ecd696e6b24adf293d0a4abebced378b658c85cac4f7dda8fcf8a574323339a953e02c72d0535d2586e186820790ba4e6461098c6379d1db17e1f218a84d2e104e0c48289eedbe03e2eb21939e659856bfb85ba03070dcd7ea82c58ba72747d29bd2fa481d135e81703618dffaae2c94f2fcd875b2c13b0697435fd7f5bee7ea30da3f3ba5bf89c7ae8d64d83ee22b81471be641715")
unlink(&(0x7f0000000380)='./file0\x00')

13:23:15 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:15 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:15 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea\x94\xe0\xeb\x9e\xf4\x00=<R\x86|Z\"\xa8>v\xe3\xeaY\xees\xe9z\xaf\xf9\xce6\xa1\xe0', 0x200002, 0x0)
fchdir(r0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
flistxattr(r1, 0x0, 0x0)

13:23:15 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000280))
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000380)={0x0, <r2=>0x0})
capset(&(0x7f00000003c0)={0x0, r2}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
fcntl$getownex(r1, 0x10, &(0x7f00000002c0))
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

[ 2744.561438][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2744.567247][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2744.573095][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2744.578922][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2744.584710][    C1] protocol 88fb is buggy, dev hsr_slave_1
13:23:15 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x800000000000b)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)

13:23:15 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
syz_emit_ethernet(0x5e, &(0x7f0000000140)={@local, @empty, [], {@ipv4={0x800, {{0xc, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev, {[@generic={0x8b, 0x8, "1c05177e34f8"}, @noop, @timestamp={0x44, 0x10, 0x6, 0x3, 0x0, [{[], 0x1a1}, {[@multicast1]}]}, @ssrr={0x89, 0x3}]}}, @tipc=@payload_direct={{{{0x20, 0x0, 0x1ff, 0xaf8, 0x7fffffff, 0x8, 0x0, 0x2, 0x20, 0x0, 0x0, 0x9884, 0x2, 0x3, 0x2, 0x100000001, 0x0, 0x4e20, 0x4e21}, 0x4, 0x2}}}}}}}, 0x0)

13:23:15 executing program 1:

13:23:15 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)
syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x92982)

13:23:15 executing program 1:

13:23:15 executing program 4:

13:23:15 executing program 1:

[ 2744.961497][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2744.967345][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2744.973146][    C0] protocol 88fb is buggy, dev hsr_slave_0
13:23:15 executing program 4:

13:23:16 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

[ 2745.388178][ T7497] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2745.397152][ T7497] FAT-fs (loop5): Filesystem has been set read-only
13:23:16 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:16 executing program 1:

13:23:16 executing program 4:

13:23:16 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000280))
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000380)={0x0, <r2=>0x0})
capset(&(0x7f00000003c0)={0x0, r2}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
fcntl$getownex(r1, 0x10, &(0x7f00000002c0))
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:16 executing program 4:

13:23:16 executing program 1:

13:23:16 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0xa0001, 0x0)
recvmsg(r0, &(0x7f0000000580)={&(0x7f0000000300)=@vsock, 0x80, &(0x7f0000000540)=[{&(0x7f0000000400)=""/80, 0x50}, {&(0x7f0000000480)=""/131, 0x83}], 0x2}, 0x20)
r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r1, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = gettid()
capset(&(0x7f0000000040)={0x0, r3}, &(0x7f0000000100)={0xfffffffffffffff7, 0x800, 0x3aa6, 0x7, 0x3ff, 0x8})
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000380))
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r4 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000140)=0x8, 0x5, 0x3)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, r5, 0x714, 0x70bd2d, 0x25dfdbfd, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x401, 0x40, 0x5}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
tkill(r4, 0x1000000000013)

13:23:16 executing program 4:

13:23:16 executing program 1:

13:23:16 executing program 4:

13:23:16 executing program 1:

[ 2746.068600][ T7497] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2746.077492][ T7497] FAT-fs (loop5): Filesystem has been set read-only
13:23:17 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:17 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:17 executing program 4:

13:23:17 executing program 1:

13:23:17 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000280))
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000380)={0x0, <r2=>0x0})
capset(&(0x7f00000003c0)={0x0, r2}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:17 executing program 4:

13:23:17 executing program 1:

13:23:17 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380)={{0x6}})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:17 executing program 4:

13:23:17 executing program 1:

13:23:17 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000280))
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000380)={0x0, <r2=>0x0})
capset(&(0x7f00000003c0)={0x0, r2}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:17 executing program 1:

[ 2746.851061][ T7497] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2746.880304][ T7497] FAT-fs (loop5): Filesystem has been set read-only
[ 2747.265051][ T7497] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2747.276774][ T7497] FAT-fs (loop5): Filesystem has been set read-only
13:23:18 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:18 executing program 4:

13:23:18 executing program 1:

13:23:18 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:18 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000280))
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000380)={0x0, <r2=>0x0})
capset(&(0x7f00000003c0)={0x0, r2}, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:18 executing program 4:

13:23:18 executing program 1:

13:23:18 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:18 executing program 4:

13:23:18 executing program 1:

13:23:18 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000280))
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000380)={0x0, <r2=>0x0})
capset(&(0x7f00000003c0)={0x0, r2}, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:18 executing program 1:

[ 2747.812234][ T7497] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2747.845620][ T7497] FAT-fs (loop5): Filesystem has been set read-only
13:23:18 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:18 executing program 4:

13:23:18 executing program 1:

[ 2748.243285][ T7497] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2748.269490][ T7497] FAT-fs (loop5): Filesystem has been set read-only
13:23:19 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:19 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000280))
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000380)={0x0, <r2=>0x0})
capset(&(0x7f00000003c0)={0x0, r2}, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:19 executing program 1:

13:23:19 executing program 4:
syz_genetlink_get_family_id$nbd(0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x40000141042, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f0000000040))
write$P9_RLCREATE(r1, &(0x7f0000000000)={0x18}, 0x18)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x100141042, 0x80)
sendfile(r1, r3, 0x0, 0x8fff)

13:23:19 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
r1 = dup(r0)
ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000100))
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r3 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r3, 0x1000000000013)

13:23:19 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
truncate(&(0x7f0000000300)='./bus\x00', 0x0)

13:23:19 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
sync_file_range(r0, 0x9, 0x3cdb, 0x1)
sendmmsg(r0, &(0x7f0000007e00), 0x800000000000197, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x2, 0x16, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x6e6bb6, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@remote, @in=@loopback}}]}, 0x50}}, 0x0)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = dup(r2)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmsg$nl_netfilter(r3, &(0x7f0000003780)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003740)={&(0x7f0000000300)={0x18, 0xd, 0xb, 0x4, 0x70bd27, 0x25dfdbfc, {0xb, 0x0, 0x2}, [@nested={0x4, 0x8b}]}, 0x18}}, 0x4008080)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x7fff)
sendfile(r3, r4, 0x0, 0x8000fffffffe)

13:23:19 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000280))
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000380))
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

[ 2748.781642][ T7497] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2748.790309][ T7497] FAT-fs (loop5): Filesystem has been set read-only
13:23:19 executing program 1:
ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0)
memfd_create(0x0, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4000001, 0x182)
r1 = memfd_create(&(0x7f0000000180)='*\x00', 0x0)
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
keyctl$unlink(0x9, 0x0, 0x0)
write(r3, &(0x7f00000001c0), 0xfffffef3)
read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3)
ioctl$PPPIOCSFLAGS1(r3, 0x40047459, 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
getresuid(&(0x7f00000001c0), 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000500))
ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000ec0))
fcntl$getownex(r0, 0x10, &(0x7f0000001f80))
getpid()
getresuid(&(0x7f0000003200), &(0x7f0000003240), 0x0)
getresuid(&(0x7f00000032c0), &(0x7f0000003300), &(0x7f0000003340))
getuid()
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, &(0x7f0000003540))
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000003580)={{{@in6=@mcast1, @in6=@loopback}}, {{@in6}, 0x0, @in6=@mcast2}}, &(0x7f0000003680)=0xe8)
getpgid(0xffffffffffffffff)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000040c0)={{{@in=@broadcast, @in=@initdev}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, 0x0)
getgroups(0x2, &(0x7f0000004200)=[0x0, 0xffffffffffffffff])
getpid()
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, 0x0, &(0x7f0000004340))
getgroups(0x2, &(0x7f0000004380)=[0x0, 0xffffffffffffffff])
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000043c0))
getgid()
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_CAPACITY(r0, 0x4c07)
ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f00000005c0)=""/242)
sendfile(r0, r0, 0x0, 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f00000006c0)=""/150)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)

13:23:19 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:19 executing program 4:

13:23:19 executing program 1:

[ 2749.275853][ T7497] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2749.286698][ T7497] FAT-fs (loop5): Filesystem has been set read-only
13:23:20 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:20 executing program 4:
socket$kcm(0x29, 0x2, 0x0)
close(0xffffffffffffffff)
socket$kcm(0x2, 0x0, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000780)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0x0, 0x4, 0x40, 0x0, 0xffffffffffffff9c}, 0x2c)
r2 = bpf$MAP_CREATE(0x4, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xa, &(0x7f00000000c0)=r2, 0x4)
r3 = socket$kcm(0xa, 0x6, 0x0)
setsockopt$sock_attach_bpf(r3, 0x10d, 0xf, 0xffffffffffffffff, 0x80)
socket$kcm(0x29, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='cpu.stat\x00')
close(r1)

13:23:20 executing program 1:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000180), 0x12)

13:23:20 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000280))
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000380))
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:20 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
syz_init_net_socket$x25(0x9, 0x5, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)
r3 = dup(r1)
ioctl$NBD_SET_TIMEOUT(r3, 0xab09, 0x3800000)

13:23:20 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000240), 0x12)

13:23:20 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000180), 0x12)

13:23:20 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000280))
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:20 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x9, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000e6ff0000e301140000000000"], 0x0, 0x8000, 0x1000, &(0x7f000062b000)=""/4096}, 0x48)

[ 2749.797868][ T7497] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2749.824421][ T7497] FAT-fs (loop5): Filesystem has been set read-only
13:23:20 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:20 executing program 1:
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f0000000180)="f4001100002b2c25e994efd18498d66205baa68754a30000000002000000000000000000000000002100000000000000c0010001050af32ebdbed828026256be5452644135333a847bbaeb4e914b976c5b7e34", 0x53}], 0x1}, 0x0)

13:23:20 executing program 4:
seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0xffffffff}]})
iopl(0x3)

[ 2750.187868][   T26] audit: type=1326 audit(1551101000.947:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=467 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0xffff0000
[ 2750.247798][ T7497] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2750.267600][ T7497] FAT-fs (loop5): Filesystem has been set read-only
13:23:21 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:21 executing program 1:
socket$kcm(0x29, 0x2, 0x0)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x0, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000780)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
perf_event_open(0x0, 0x0, 0x0, r0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0x0, 0x300)
perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x7, 0x100000001, 0x0, 0xfe7, 0x0, 0x0, 0x48c0, 0x0, 0x0, 0xa, 0xf677, 0xa7, 0x8, 0x0, 0x8, 0x6, 0x0, 0xfffffffffffff89d, 0x0, 0x0, 0x3ff, 0x9, 0x8, 0xfffffffffffffffd, 0x2, 0x800, 0x7, 0x7, 0x0, 0x3, 0xc9, 0x0, 0x0, 0x80, 0x0, 0xc5, 0x0, 0x8, 0x0, @perf_config_ext={0x401}, 0x4080, 0x0, 0x10000, 0x5, 0x48f, 0x5, 0x5}, 0x0, 0x8, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x0, 0x0, 0x4, 0x40, 0x0, 0xffffffffffffff9c}, 0x2c)
r2 = bpf$MAP_CREATE(0x4, &(0x7f0000000880)={0x3, 0x0, 0x0, 0x0, 0x20000000, 0x0}, 0x2c)
r3 = socket$kcm(0x2, 0x1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x6, 0xa, &(0x7f00000000c0)=r2, 0x4)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r4 = socket$kcm(0xa, 0x6, 0x0)
setsockopt$sock_attach_bpf(r4, 0x10d, 0xf, 0xffffffffffffffff, 0x80)
openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0)
socket$kcm(0x29, 0x0, 0x0)
write$cgroup_int(r1, &(0x7f0000000000)=0x8, 0x335)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
close(r1)

13:23:21 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000280))
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:21 executing program 1:
r0 = socket$kcm(0x2, 0x3, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)

[ 2750.491419][    C1] net_ratelimit: 23 callbacks suppressed
[ 2750.491428][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2750.502994][    C1] protocol 88fb is buggy, dev hsr_slave_1
13:23:21 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
accept4$packet(0xffffffffffffff9c, &(0x7f0000001580)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000015c0)=0x14, 0x80000)
connect$packet(r0, &(0x7f0000001600)={0x11, 0xf7, r1, 0x1, 0x333, 0x6, @broadcast}, 0x14)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
r3 = open(&(0x7f0000000140)='./file0\x00', 0x2600, 0x0)
setsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f0000000280)=0xfb1, 0x4)
r4 = dup3(r0, r2, 0x80000)
accept$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x1c)
ioctl$EVIOCGUNIQ(r4, 0x80404508, &(0x7f0000000400)=""/180)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r5 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r5, 0x1000000000013)

13:23:21 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)=0x10100)

13:23:21 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000280))
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:21 executing program 1:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000180), 0x12)

[ 2750.801431][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2750.807418][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2750.813283][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2750.819062][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2750.824831][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2750.838860][ T7497] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2750.847670][ T7497] FAT-fs (loop5): Filesystem has been set read-only
13:23:21 executing program 1:
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0)
perf_event_open(0x0, 0x0, 0x0, r0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0x0, 0x300)
perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x4, &(0x7f0000000880)={0x3, 0x0, 0x0, 0x0, 0x20000000, 0x0}, 0x2c)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xa, &(0x7f00000000c0)=r2, 0x4)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0)
socket$kcm(0xa, 0x6, 0x0)
openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0)
write$cgroup_int(r1, &(0x7f0000000000)=0x8, 0x335)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
close(r1)

[ 2750.960855][   T26] audit: type=1326 audit(1551101001.717:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=467 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0xffff0000
13:23:21 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:21 executing program 4:
linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0)
prctl$PR_GET_SECUREBITS(0x1b)
ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
setresgid(0x0, 0xee00, 0x0)

13:23:21 executing program 1:
r0 = timerfd_create(0x0, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
fchown(r0, 0x0, 0x0)

[ 2751.202592][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2751.208392][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2751.214235][    C0] protocol 88fb is buggy, dev hsr_slave_0
13:23:22 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00000000000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:22 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x26e1, 0x0)
prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0)
write$P9_RGETLOCK(r0, &(0x7f0000000000)=ANY=[], 0x0)

13:23:22 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x26e1, 0x0)
epoll_create(0x0)
write$P9_RGETLOCK(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="b273018b9a6beca1787e1bdbe1f5100cef5e1604aeadbf8c251d701a9ad785e61a16a7c54581f24350e408820a0f3101774c2f514697c02f14a8f0b1940c334e6e13cdbc4ea62c901b51891b4a42fa20948a4136b5283a4d91d6a3691f5e5305f9a0c80d353072271aa4aae75e48a40bc5e4f784", @ANYRES64=0x0, @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRESHEX]]], 0x84)

13:23:22 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000280))
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

[ 2751.400896][ T7497] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2751.411485][ T7497] FAT-fs (loop5): Filesystem has been set read-only
[ 2751.689376][ T7497] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2751.698090][ T7497] FAT-fs (loop5): Filesystem has been set read-only
13:23:22 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000300)={0x8, 0x1, {0xffffffffffffffff, 0x0, 0x6, 0x3, 0x1}})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'L-', 0x10001}, 0x28, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x200, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r3, 0x1000000000013)

13:23:22 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
shutdown(0xffffffffffffffff, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
write$binfmt_misc(r0, 0x0, 0xfffffff8)

13:23:22 executing program 4:
r0 = timerfd_create(0x0, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r1 = dup2(r0, r0)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0)
timerfd_settime(r1, 0x0, 0x0, &(0x7f0000000040))

13:23:22 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000280))
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:22 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000000400)={0x2, 0x4e23, @local}, 0x10)
sendto(r0, &(0x7f0000000600)="e9c7", 0x2, 0x1, 0x0, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000))

13:23:22 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:22 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, 0x0)

13:23:22 executing program 4:
r0 = socket$inet6(0xa, 0x100800000000002, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0xd3, 0x0, @ipv4={[], [], @local}}, 0x1c)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps\x00')
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendfile(r0, r1, 0x0, 0x88008)
sendmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x4f8887a5bd400eaf, 0x0}}], 0x227, 0x0)

[ 2752.185251][ T7497] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2752.197154][ T7497] FAT-fs (loop5): Filesystem has been set read-only
13:23:23 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:23 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000280))
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:23 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xffffffffffffffff}, 0x4)
r1 = socket(0x200000000000011, 0x4000000000080002, 0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2}, 0x14)
write$P9_RVERSION(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="61eadf8a8a5bbbaf659ebe2872d9a9841aa6c84d"], 0x14)

13:23:23 executing program 4:
socketpair$unix(0x1, 0x80000000000007fe, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x1, 0x800000000006)
r2 = dup(r1)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c)
request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)
keyctl$update(0x2, 0x0, 0x0, 0x0)
r3 = open(0x0, 0x0, 0x0)
socket$packet(0x11, 0x0, 0x300)
unlinkat(0xffffffffffffffff, 0x0, 0x0)
r4 = open(&(0x7f00000003c0)='./file0\x00', 0x20141042, 0x0)
r5 = getpid()
r6 = getpgrp(r5)
openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0)
ptrace(0x10, r6)
capget(&(0x7f0000000000)={0x19980330, r6}, &(0x7f0000000040)={0x5, 0x9, 0x3, 0xffffffff, 0x8})
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@multicast1}}, {{}, 0x0, @in=@loopback}}, &(0x7f0000000400)=0xe8)
lstat(&(0x7f0000000440)='./file0\x00', 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
syslog(0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ftruncate(r4, 0x280080)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x800, 0x7fff}]}, 0x10)
sendfile(r2, r4, &(0x7f0000d83ff8), 0x200800900000002)

[ 2752.331058][ T1969] capability: warning: `syz-executor.4' uses 32-bit capabilities (legacy support in use)
[ 2752.603210][ T7497] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2752.611920][ T7497] FAT-fs (loop5): Filesystem has been set read-only
13:23:23 executing program 3:
lsetxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.redirect\x00', &(0x7f0000000280)='./file0\x00', 0x8, 0x1)
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
modify_ldt$read(0x0, &(0x7f0000000400)=""/138, 0x8a)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="ca77e72d3cd66b9041361bb80758a44bf09d282e11", @ANYRES16=r2, @ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4)
r3 = gettid()
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0x404080, 0x0)
ioctl$RTC_VL_CLR(r4, 0x7014)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x4, 0x40000)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r3, 0x1000000000013)

13:23:23 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x0, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0)

13:23:23 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000280))
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:23 executing program 1:

13:23:23 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000280))
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:23 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:23 executing program 1:

13:23:23 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000280))
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:24 executing program 1:

13:23:24 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000280))
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:24 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:24 executing program 4:

13:23:24 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000040)=""/28, 0xfffffffffffffea1)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x8000, 0x0)
ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000140)={0x18, 0x0, {0x0, @empty, 'veth0_to_bridge\x00'}})

13:23:24 executing program 4:

13:23:24 executing program 1:

13:23:24 executing program 4:

13:23:24 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000280))
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

[ 2753.664638][ T7497] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2753.697551][ T7497] FAT-fs (loop5): Filesystem has been set read-only
[ 2753.857912][ T2349] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006241)
[ 2753.865782][ T2349] FAT-fs (loop5): Filesystem has been set read-only
13:23:24 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:24 executing program 4:

13:23:24 executing program 1:

13:23:24 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
write$binfmt_elf32(r1, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0xfb77, 0x100000001, 0x7, 0x547, 0x60, 0x2, 0x7, 0x6, 0x8f, 0x38, 0x382, 0x9, 0x3, 0x20, 0x2, 0x2, 0x2}, [{0x6474e557, 0x1f, 0x1a, 0x5183, 0x9, 0xffffffffffff0000, 0x0, 0x20}, {0x7, 0xfffffffffffffff9, 0x400, 0x5, 0x3, 0x3, 0x6, 0xd39}], "c9f3239867f809ced65e31d916ee91ac93888784b1b23fe0d67434af1bf23a23b5e217d4faeabe7555eb40f9b716d1abe1c22306ba5bac4ed0d940220fd502f72c5e43a5a0861e64e1f590c36d78f76cef2a5dda61e47dbd8450bd980ff6fb2bf758f97dd2e8c4b903ad5669f33fbdac401c532190cabac39a3f4a500bfba5a32eff079cfe31582d28798864683651779d6c9150b9ddb8934858357b3d7d2b2d1fa853e4362ea81396", [[], []]}, 0x321)
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x201, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000100)={<r4=>0x0, 0x3ff, 0x20}, &(0x7f0000000140)=0xc)
setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r4, 0xffffffffffff0000}, 0x8)

13:23:24 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000280))
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

[ 2753.947587][ T7497] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006241)
13:23:25 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:25 executing program 1:

13:23:25 executing program 4:

13:23:25 executing program 1:

13:23:25 executing program 4:
clone(0x800200, 0x0, 0x0, 0x0, 0x0)
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
execve(0x0, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
creat(&(0x7f0000000bc0)='./file2\x00', 0x0)
read(r0, &(0x7f0000000540)=""/11, 0x485)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200))
r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109)
dup2(r0, r1)
execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0)
open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0)

13:23:25 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:25 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r0=>0xffffffffffffffff})
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f0000004100), 0x2a37, 0x0, 0x0)

[ 2754.369334][ T7497] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2754.388947][ T7497] FAT-fs (loop5): Filesystem has been set read-only
[ 2754.836924][ T7497] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2754.845587][ T7497] FAT-fs (loop5): Filesystem has been set read-only
13:23:25 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:25 executing program 4:
setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000400)='tls\x00', 0xfffffffffffffe73)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, 0x0, &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0)
r0 = socket(0x10, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000940)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0)
chdir(&(0x7f0000000340)='./file0\x00')
symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00')
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000900)={&(0x7f00000002c0), 0xc, &(0x7f0000000480)={0x0}}, 0x10)
clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000540))
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000440)={0x7ff, 0xb0a, &(0x7f00000009c0), 0x0})
ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, 0x0)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@local, @empty, @mcast2, 0x0, 0x78})
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, 0x0, 0x41)

13:23:25 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:25 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x2, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000100))
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080), 0x10)
mmap(&(0x7f0000000000/0xf9a000)=nil, 0xf9a000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r4 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r4, 0x1000000000013)
ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000300)={0x2, 0x0, [{0x0, 0x7, 0x4, 0x1000, 0x401, 0x7fe0000000, 0x7}, {0x40000001, 0x2, 0x0, 0x93ba, 0x2, 0x1, 0x1}]})

13:23:25 executing program 1:
socket$alg(0x26, 0x5, 0x0)
inotify_init1(0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r3=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

13:23:26 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:26 executing program 1:
msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="eb3c906d6b66732e6661740002047e0002000270f7f8", 0x16}], 0x0, 0x0)
setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0)
umount2(&(0x7f0000000280)='./file0\x00', 0x0)

13:23:26 executing program 4:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={0x0}}, 0x0)

[ 2755.309384][ T2872] FAT-fs (loop1): Directory bread(block 126) failed
[ 2755.334667][ T2872] FAT-fs (loop1): Directory bread(block 127) failed
[ 2755.349469][ T2872] FAT-fs (loop1): Directory bread(block 128) failed
[ 2755.358188][ T2872] FAT-fs (loop1): Directory bread(block 129) failed
[ 2755.368308][ T2872] FAT-fs (loop1): Directory bread(block 130) failed
[ 2755.389589][ T2872] FAT-fs (loop1): Directory bread(block 131) failed
13:23:26 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0)
preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x1ffc00}], 0x1, 0x0)

[ 2755.414095][ T2872] FAT-fs (loop1): Directory bread(block 132) failed
[ 2755.428343][ T2872] FAT-fs (loop1): Directory bread(block 133) failed
[ 2755.443567][ T2872] FAT-fs (loop1): Directory bread(block 134) failed
[ 2755.450746][ T2872] FAT-fs (loop1): Directory bread(block 135) failed
13:23:26 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fchdir(0xffffffffffffffff)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000100)=[{&(0x7f0000000140)="eb3c906d6b66732e6661740002047e0002000270f7f8", 0x16}], 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x1000000000000, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f00000001c0)={r0, r0, 0x9cec, 0x2b, &(0x7f0000000080)="90434ca48d55775248d411f6c11a2cb18834babc9bf886b01cffc0b40ed7ff6c1c1aa336cba889c8a52852", 0x101, 0x9, 0x0, 0xe00000000, 0x80000000, 0x3, 0xffffffffffffffff, 'syz1\x00'})
umount2(&(0x7f0000000280)='./file0\x00', 0x0)

13:23:26 executing program 4:
r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x400000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usbmon(&(0x7f00000002c0)='/dev/usbmon#\x00', 0x0, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
pipe(&(0x7f00000003c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setstatus(r0, 0x4, 0x2c00)
write(r3, &(0x7f00000001c0), 0xfffffef3)
read(r2, &(0x7f0000000540)=""/250, 0x446a6e69)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r4=>0x0})
pselect6(0x40, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000200)={0x0, r4+30000000}, 0x0)

13:23:26 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
fchdir(r0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(0xffffffffffffffff, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

[ 2755.716090][ T7497] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2755.725415][ T7497] FAT-fs (loop5): Filesystem has been set read-only
13:23:26 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:26 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x800000004}, 0x14)
listen(r0, 0x2)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e23, @local}]}, &(0x7f00000001c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000), &(0x7f00000000c0)=0x4)

13:23:26 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f0000000340)='./bus\x00', 0x0)
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
fcntl$setstatus(r1, 0x4, 0x44000)
fcntl$getown(0xffffffffffffffff, 0x9)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000dc0))
ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, 0x0)
io_setup(0x7, &(0x7f0000000200)=<r2=>0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
r4 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r4, 0x0)
fcntl$dupfd(r0, 0x406, r3)
write$P9_RSTATu(r3, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x4)
ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x6)
setitimer(0x1, &(0x7f0000000000)={{0x0, 0x7530}}, &(0x7f0000000040))
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[ 2756.054012][   T26] audit: type=1804 audit(1551101006.817:83): pid=3377 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir719355673/syzkaller.TSxfwF/4254/bus" dev="sda1" ino=17313 res=1
[ 2756.091143][   T26] audit: type=1804 audit(1551101006.847:84): pid=3377 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir719355673/syzkaller.TSxfwF/4254/bus" dev="sda1" ino=17313 res=1
[ 2756.721434][    C1] net_ratelimit: 23 callbacks suppressed
[ 2756.721443][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2756.732914][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2757.041454][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2757.047274][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2757.053096][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2757.058870][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2757.064646][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2757.441467][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2757.447269][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2757.453088][    C0] protocol 88fb is buggy, dev hsr_slave_0
13:23:28 executing program 1:
socket$alg(0x26, 0x5, 0x0)
inotify_init1(0x0)
pipe(&(0x7f0000000440))
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

13:23:28 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
fchdir(r0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(0xffffffffffffffff, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:28 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f0000000340)='./bus\x00', 0x0)
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
fcntl$setstatus(r1, 0x4, 0x44000)
fcntl$getown(0xffffffffffffffff, 0x9)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000dc0))
ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, 0x0)
io_setup(0x7, &(0x7f0000000200)=<r2=>0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
r4 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r4, 0x0)
fcntl$dupfd(r0, 0x406, r3)
write$P9_RSTATu(r3, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x4)
ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x6)
setitimer(0x1, &(0x7f0000000000)={{0x0, 0x7530}}, &(0x7f0000000040))
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}])

13:23:28 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:28 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:28 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

[ 2758.147336][   T26] audit: type=1804 audit(1551101008.907:85): pid=3612 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir719355673/syzkaller.TSxfwF/4255/bus" dev="sda1" ino=17591 res=1
13:23:28 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
fchdir(r0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(0xffffffffffffffff, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:29 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f0000000340)='./bus\x00', 0x0)
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
fcntl$setstatus(r1, 0x4, 0x44000)
fcntl$getown(0xffffffffffffffff, 0x9)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000dc0))
ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, 0x0)
io_setup(0x7, &(0x7f0000000200)=<r2=>0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
r4 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r4, 0x0)
fcntl$dupfd(r0, 0x406, r3)
write$P9_RSTATu(r3, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x4)
ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x6)
setitimer(0x1, &(0x7f0000000000)={{0x0, 0x7530}}, &(0x7f0000000040))
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}])

13:23:29 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r0, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

[ 2758.357958][   T26] audit: type=1804 audit(1551101009.117:86): pid=3634 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir719355673/syzkaller.TSxfwF/4256/bus" dev="sda1" ino=17591 res=1
13:23:29 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f0000000340)='./bus\x00', 0x0)
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
fcntl$setstatus(r1, 0x4, 0x44000)
fcntl$getown(0xffffffffffffffff, 0x9)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000d80), &(0x7f0000000dc0)=0xc)
io_setup(0x7, &(0x7f0000000200)=<r2=>0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
r4 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1, 0x11, r4, 0x0)
r5 = fcntl$dupfd(r0, 0x406, r3)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000007000/0x2000)=nil, 0x2000}, &(0x7f0000000140)=0x10)
write$P9_RSTATu(r3, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x4)
ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x0)
setitimer(0x0, 0x0, &(0x7f0000000040))
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}])

13:23:29 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r0, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

[ 2758.564694][   T26] audit: type=1804 audit(1551101009.327:87): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir719355673/syzkaller.TSxfwF/4257/bus" dev="sda1" ino=17591 res=1
[ 2758.569610][ T3642] syz-executor.4 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
13:23:29 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r0, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

[ 2758.962437][   T26] audit: type=1804 audit(1551101009.717:88): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir719355673/syzkaller.TSxfwF/4257/bus" dev="sda1" ino=17591 res=1
13:23:29 executing program 1:
mkdir(&(0x7f0000632000)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='cpuset\x00', 0x0, 0x0)

13:23:29 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:29 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100))
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r3 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r3, 0x1000000000013)

13:23:29 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:29 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:29 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f0000000340)='./bus\x00', 0x0)
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
fcntl$setstatus(r1, 0x4, 0x44000)
fcntl$getown(0xffffffffffffffff, 0x9)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000d80), &(0x7f0000000dc0)=0xc)
io_setup(0x7, &(0x7f0000000200)=<r2=>0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
r4 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1, 0x11, r4, 0x0)
r5 = fcntl$dupfd(r0, 0x406, r3)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000007000/0x2000)=nil, 0x2000}, &(0x7f0000000140)=0x10)
write$P9_RSTATu(r3, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x4)
ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x0)
setitimer(0x0, 0x0, &(0x7f0000000040))
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}])

13:23:30 executing program 1:
msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)
socketpair$unix(0x1, 0x80000800000003, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x803})
ioctl$TUNSETLINK(r2, 0x400454cd, 0x308)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
fchdir(r3)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="eb3c906d6b66732e6661740002047e0002000270f7f8", 0x16}], 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r4 = creat(&(0x7f00000001c0)='./file1\x00', 0x82)
ioctl$RTC_VL_CLR(r4, 0x7014)
lsetxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="08fb1507e1d18cc1cc63f38a542e78ca6826488e1149a13f15cabbcab1d39f01eab46d7641bc5adc96df3945a5d8f1ef6c59af1ce73cc2d914ca46dd"], 0x1, 0x3)
setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000100), 0x4)

[ 2759.341299][   T26] audit: type=1804 audit(1551101010.097:89): pid=3997 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir719355673/syzkaller.TSxfwF/4258/bus" dev="sda1" ino=17580 res=1
13:23:30 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r0, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:30 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x10000014c)
inotify_init()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, &(0x7f0000000440))
clock_gettime(0x0, &(0x7f0000000040)={0x0, <r3=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

13:23:31 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:31 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:31 executing program 4:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x2f)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="ca47c5c0662f98888721176c3d1266c8fe8fb4c0bae74c19ce78ef40001bf0fac008ad5eab94729933ad11e73ea59f9b35c631594df749fadb"], 0x39)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0))
ptrace$cont(0x1f, r0, 0x0, 0x0)

13:23:31 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)=<r3=>0x0)
timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
tkill(r2, 0x1000000000013)

[ 2760.699995][ T7497] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2760.709370][ T7497] FAT-fs (loop5): Filesystem has been set read-only
13:23:31 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
prctl$PR_SET_KEEPCAPS(0x8, 0x1)

13:23:31 executing program 1:
clone(0x200, 0x0, 0x0, 0x0, 0x0)
mknod(&(0x7f0000f80000)='./file0\x00', 0x1042, 0x0)
execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0)
read(r0, &(0x7f0000000540)=""/11, 0x485)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200))
r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109)
r2 = dup2(r0, r1)
execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0)
open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0)
clone(0x3102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000000)='./file1/file0\x00', 0x0, 0x0)
ioctl$VT_RESIZEX(r2, 0x560a, 0x0)

13:23:31 executing program 4:
socketpair$unix(0x1, 0x40400000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8)
sendmmsg(r1, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0)

13:23:31 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r0, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:31 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet(r0, &(0x7f0000000400), 0x45)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000008003, 0x80000001}, 0x14)
shutdown(r0, 0x1)

13:23:31 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)

13:23:31 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000240)='threaded\x00', 0xfb3f)
fallocate(r1, 0x0, 0x0, 0x10001)
fsync(r2)

13:23:32 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r0, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:32 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:32 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x5}, 0x20)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)

13:23:32 executing program 4:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000080)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000051c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

[ 2762.961452][    C1] net_ratelimit: 23 callbacks suppressed
[ 2762.961460][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2762.972933][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2763.281457][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2763.287332][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2763.293174][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2763.298916][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2763.304653][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2763.681438][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2763.687221][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2763.693044][    C0] protocol 88fb is buggy, dev hsr_slave_0
13:23:34 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
r3 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8, 0x0)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000100)={<r4=>0x0, 0x9}, &(0x7f0000000140)=0x8)
setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000280)={r4, 0x6, 0x9, 0x10001}, 0x10)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:34 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00000000000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:34 executing program 5:
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:34 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000480))

13:23:34 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4)

13:23:34 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:34 executing program 1:
clone(0x2000000, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)="f73efcb35a1a48c073d1d67023391884f85f03d35d9fbb352f8bf3824ecd696e6b24adf293d0a4abebced378b658c85cac4f7dda8fcf8a574323339a953e02c72d0535d2586e186820790ba4e6461098c6379d1db17e1f218a84d2e104e0c48289eedbe03e2eb21939e659856bfb85ba03070dcd7ea82c58ba72747d29bd2fa481d135e81703618dffaae2c94f2fcd875b2c13b0697435fd7f5bee7ea30da3f3ba5bf89c7ae8d64d83ee22b81471be641715")

13:23:34 executing program 5:
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:34 executing program 4:
socket$kcm(0x29, 0x2, 0x0)
close(0xffffffffffffffff)
r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)
socket$kcm(0x2, 0x3, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, 0x0)
r1 = perf_event_open(&(0x7f0000000400)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x8, 0x401, 0x10000, 0x6, 0x1ff, 0x81, 0x8, 0x0, 0x0, 0x7f, 0x0, 0x1ff, 0x0, 0x4, 0x445, 0x5, 0xffffffff00000000, 0x9, 0x5, 0x0, 0x1c00000000, 0x9c, 0x46, 0x1000, 0xb92, 0xfffffffeffffffff, 0x0, 0x64e, 0x200, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10810, 0x1, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0x0, 0x300)
perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x7, 0x100000001, 0x0, 0xfe7, 0x0, 0xed, 0x48c0, 0x0, 0xff, 0xa, 0xf677, 0xa7, 0x8, 0x0, 0x8, 0x6, 0x0, 0xfffffffffffff89d, 0x6, 0x0, 0x3ff, 0x9, 0x8, 0xfffffffffffffffd, 0x2, 0x800, 0x7, 0x7, 0x0, 0x3, 0xc9, 0x10001, 0x0, 0x80, 0x3f, 0xc5, 0x0, 0x8, 0x0, @perf_config_ext={0x401, 0x7}, 0x4080, 0x401, 0x10000, 0x5, 0x48f, 0x5, 0x5}, 0x0, 0x8, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0x0, 0x4, 0x40, 0x0, 0xffffffffffffff9c}, 0x2c)
r3 = bpf$MAP_CREATE(0x4, &(0x7f0000000880)={0x3, 0x0, 0x0, 0x0, 0x20000000, 0x0}, 0x2c)
r4 = socket$kcm(0x2, 0x1, 0x0)
setsockopt$sock_attach_bpf(r4, 0x6, 0xa, &(0x7f00000000c0)=r3, 0x4)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r5 = socket$kcm(0xa, 0x6, 0x0)
perf_event_open(&(0x7f0000000700)={0x2, 0x70, 0x5, 0x4, 0x1000, 0x6, 0x0, 0x24, 0x0, 0x2, 0x101, 0x101, 0x0, 0x81, 0x7, 0x0, 0x7, 0x8, 0x8, 0x7ff, 0x4a, 0x9, 0x5, 0x61dc, 0x0, 0x81, 0x2, 0x6, 0x0, 0x0, 0x2, 0x2, 0x1, 0x6, 0x40000000000000, 0x0, 0x4, 0x100000001, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x20}, 0x401, 0x7, 0x1000, 0x0, 0x7f, 0xfffffffffffffff8}, 0x0, 0xd, r1, 0xb)
setsockopt$sock_attach_bpf(r5, 0x10d, 0xf, 0xffffffffffffffff, 0x80)
openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0)
socket$kcm(0x29, 0x7, 0x0)
write$cgroup_int(r2, &(0x7f0000000000)=0x8, 0x335)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000040)='cpu.stat\x00')
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x919)
close(r2)

13:23:34 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000000000/0xf9a000)=nil, 0xf9a000, 0x800000001, 0x32, 0xffffffffffffffff, 0x0)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x5)
connect(r1, &(0x7f0000000040)=@x25={0x9, @remote}, 0x80)

13:23:34 executing program 1:

13:23:34 executing program 5:
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:35 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x1, 0x2)
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:35 executing program 1:

13:23:35 executing program 4:

13:23:35 executing program 5:
syz_mount_image$vfat(0x0, &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:35 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:35 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:35 executing program 1:

13:23:35 executing program 4:

13:23:35 executing program 1:

13:23:35 executing program 4:

13:23:35 executing program 1:

13:23:35 executing program 5:
syz_mount_image$vfat(0x0, &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:36 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000400)={{0xa0, 0x6}, 'port1\x00', 0xf0, 0x90403, 0x8, 0xac, 0x80000000, 0x7, 0x9, 0x0, 0x0, 0x7fffffff})
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)
r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x20000, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000100))

13:23:36 executing program 1:

13:23:36 executing program 4:

13:23:36 executing program 5:
syz_mount_image$vfat(0x0, &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:36 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:36 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:36 executing program 4:

13:23:36 executing program 1:

13:23:36 executing program 1:

13:23:36 executing program 4:

13:23:36 executing program 1:

13:23:36 executing program 1:

13:23:37 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @rand_addr=0x6}, 0x10)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x448080, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000340))
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000280)='dctcp\x00', 0x6)
sendto$inet(r2, 0x0, 0x2ec, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='vxcan1\x00\x00\x00\xf8\xff\xff\xff\x00', 0x10)
sendto(r2, &(0x7f0000000080)='\x00', 0x1, 0x0, 0x0, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r4 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r4, 0x1000000000013)

13:23:37 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', 0x0, 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:37 executing program 4:

13:23:37 executing program 1:

13:23:37 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:37 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:37 executing program 4:

13:23:37 executing program 1:

13:23:37 executing program 1:

13:23:37 executing program 4:

13:23:37 executing program 4:

13:23:37 executing program 1:

13:23:38 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
fstat(r1, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000280)='./file0\x00', 0x6, 0x1, &(0x7f00000007c0)=[{&(0x7f00000006c0)="3f0326249a955f423792f64b0f15cf2cb712c3a40c7cb868b912d24128ab0f69713275f6c52338dbf18a394afdfdf1c19d39fea7d25790164cf8681dde2ef7907e0190722b093bf856ef75ef6d354735cf4e60f5600dca51c2fa52d8db0eb94871d287a88a918a79e32b9b15b49aceafc81098c3026d77fbfdf9c1e1184859c94b23bf27363a51c6564d4aa235ed41a22a691b2c1aed59c586fe1f73b26b7c1cda2bdefd578c8a0c4b171381f64b9cbb0780e7ca7be17e87b9b5b3cb63fd3376dfa9aa4a2168cdbcd9", 0xc9}], 0x8000, &(0x7f0000000880)=ANY=[@ANYBLOB='noacl,block-allocator=no_unhashed_tion,block-allocator=notest4,acl,hash,smackfstransmute=syz1\x00,smackfsdef=syz0\x00,subj_role=*,fowner>\x00\x00\x00\x00\x00\x00', @ANYRESDEC=r2, @ANYBLOB=',\x00'])
ioctl(r1, 0x1000008914, &(0x7f0000000400)="0adc1f123c123f3188b070f15a6cb5d395421aa497961558e75b03da86059faf37330dcc85f26de4df36498fd45c7c80d58cc89baacdf7500e532c9b10a2da4ccf572088e66025d0e82ba20f2a55df5b868a1db47eed8feff1ff8647bfb4282bf524c90a3fe0687d2d216bbefa12bc752fea6a55dad11b31cddf718657f050f11d15a570ef2a45d472177fa8cbd8fc953bb4fa0d158f")
r3 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
r4 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x0, 0x400)
ioctl$TUNSETNOCSUM(r4, 0x400454c8, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000580)={0x0, 'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000004c0)=""/165, 0xa5, 0x1000, 0xfff, 0x6, 0x40, 0x2}, 0x120)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$ax25(r4, &(0x7f0000000300)={{0x3, @bcast, 0x2}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}, &(0x7f0000000100)=0x10)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
fcntl$addseals(r0, 0x409, 0x1)
tkill(r3, 0x1000000000013)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f0000000a00)={{0x20, 0x4}, {0x100, 0x4}, 0x3, 0x1, 0x8})
getsockname$ax25(r4, &(0x7f0000000940)={{}, [@rose, @rose, @null, @remote, @bcast, @rose, @rose, @rose]}, &(0x7f00000009c0)=0x48)

13:23:38 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', 0x0, 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:38 executing program 1:

13:23:38 executing program 4:

13:23:38 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:38 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:38 executing program 4:

13:23:38 executing program 1:

13:23:38 executing program 4:

13:23:38 executing program 1:

13:23:38 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', 0x0, 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:38 executing program 1:

[ 2768.087823][ T5726] REISERFS warning (device loop3): super-6506 reiserfs_getopt: bad value "no_unhashed_tion" for option "block-allocator"
[ 2768.087823][ T5726] 
13:23:39 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xff82)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0xdd, 0x80)
setsockopt$ax25_int(r1, 0x101, 0xf, &(0x7f0000000280)=0x200, 0x4)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r3 = gettid()
ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f0000000300))
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2000, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x4)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
tkill(r3, 0x1000000000013)

13:23:39 executing program 4:

13:23:39 executing program 1:

13:23:39 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:39 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:39 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:39 executing program 4:

[ 2769.000246][ T5763] FAT-fs (loop5): bogus number of reserved sectors
[ 2769.008444][ T5763] FAT-fs (loop5): Can't find a valid FAT filesystem
13:23:39 executing program 1:

13:23:39 executing program 4:

13:23:39 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300))
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
ppoll(&(0x7f0000000140)=[{}], 0x3c, 0x0, 0x0, 0x7b)

13:23:39 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:39 executing program 4:
socket$unix(0x1, 0x0, 0x0)
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
r1 = dup2(r0, r0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x138)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0)
write$P9_RCLUNK(r1, 0x0, 0x0)

[ 2769.201412][    C1] net_ratelimit: 23 callbacks suppressed
[ 2769.201433][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2769.212927][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2769.269370][ T5870] FAT-fs (loop5): bogus number of reserved sectors
[ 2769.276520][ T5870] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2769.521418][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2769.527237][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2769.533075][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2769.538959][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2769.544721][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2769.921427][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2769.927349][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2769.933170][    C0] protocol 88fb is buggy, dev hsr_slave_0
13:23:42 executing program 3:
read(0xffffffffffffffff, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000380))
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r1 = gettid()
r2 = dup(r0)
getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000100)={0x0, 0xf2f6, 0x8, 0x6, 0x3, 0xfffffffffffffff8, 0x7, 0x9, {<r3=>0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}}, 0xff, 0x8, 0x0, 0x2}}, &(0x7f0000000280)=0xb0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000300)={r3}, &(0x7f0000000340)=0x8)
write$P9_RRENAMEAT(r2, &(0x7f0000000040)={0x7, 0x4b, 0x2}, 0x7)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1000000000013)

13:23:42 executing program 1:
seccomp(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xfffffffffffffffb}]})
io_setup(0x5, &(0x7f0000000040)=<r0=>0x0)
io_submit(r0, 0x0, 0x0)

13:23:42 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000100)="02", 0x1}], 0x1, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x20000141046, 0x0)
fallocate(r1, 0x0, 0x0, 0x10000101)

13:23:42 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:42 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:42 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

[ 2772.062535][ T6024] FAT-fs (loop5): bogus number of reserved sectors
[ 2772.069222][ T6024] FAT-fs (loop5): Can't find a valid FAT filesystem
13:23:42 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
write$P9_RLINK(0xffffffffffffffff, 0x0, 0xee)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
getgid()
listen(r1, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x0)
connect$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
write$P9_RSTAT(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_buf(r2, 0x6, 0x0, &(0x7f0000000040)="a944fd6c12efa5ba14d48f67d6a834f99aee8869d12006cfea4dc43cc321be0bb56bb60ce1d82e786ef63a54d5c0bbb4975bed79d2bc757d8e6a15eff145c9ba118ed07b797f589092ae4ac5d20cb63f1015fb5d4272d2825763c52b8ce486c51eb0d4480c1e9f7ba5bcbd36200c0c759a27cb810e4bdbb88ba00d46d572addc82347e1bea6912249b8d06f0b4cb3d8ca0a9b87c10f6f22e78a6b3e90a7b2ea6b4c361d69acdddd7e7704eb25c804f774014b90401d2c5", 0xb7)

[ 2772.119942][   T26] audit: type=1326 audit(1551101022.877:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6013 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0xffff0000
13:23:42 executing program 3:
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000580)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$getown(r1, 0x9)
r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={<r4=>0xffffffffffffffff}, 0x13f, 0x5}}, 0x20)
fsetxattr$security_evm(r0, &(0x7f00000005c0)='security.evm\x00', &(0x7f0000000600)=@ng={0x4, 0x7, "97a893"}, 0x5, 0x3)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r4, 0x3}}, 0x10)
read(r2, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000280)={<r5=>0x0, 0x8, 0x100, 0xff6, 0x1, 0x3, 0x0, 0x100, {0x0, @in6={{0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, [], 0xe}, 0x4}}, 0x3e, 0x0, 0x180000000000, 0x101, 0x7}}, &(0x7f0000000340)=0xb0)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000400)={r5, 0xe9, "62d5d2b79affedf7014a6a7d576618f084706bbfad3c592d161691da5a042115593455d7e7ed731841ae53a96d942183751a8ef1197ff5b86371f25ef23f22f6310029a48bef5edf9138cedb8adac3258c593f0d2258ca8823ddcb45c4334222b71a4de6a7fd6aede782dc981edb1ada63fd227a39778de95e9635658f2f9bb0aff7d37c50d7c27133c85c04a3495f6cf49e34e08931e11fd0e1bad2b39cba958897a1a49705d5dcb2b2a9be5521e81b9c49c9489cfa880913a9fd2618c5d100866e84682cc78ef75304a33a165ea5128a3ddee08b2e6e56efa78645f01e904e2cd35e6ee207c98e56"}, &(0x7f0000000500)=0xf1)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000380))
write$USERIO_CMD_REGISTER(r3, &(0x7f0000000540)={0x0, 0x3ff}, 0x2)
ioctl(r6, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r7 = gettid()
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r7, 0x1000000000013)

13:23:43 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:43 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
munlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup(0xffffffffffffffff)
fdatasync(0xffffffffffffffff)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@rand_addr="b328f42951b4ad206fabcf1a48551a0b"}}, {{@in=@loopback}, 0x0, @in=@remote}}, 0xe8)

[ 2772.309434][ T6224] FAT-fs (loop5): bogus number of reserved sectors
[ 2772.316508][ T6224] FAT-fs (loop5): Can't find a valid FAT filesystem
13:23:43 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:43 executing program 4:

13:23:43 executing program 4:

[ 2772.525228][ T6401] FAT-fs (loop5): bogus number of reserved sectors
[ 2772.542390][ T6401] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2772.846326][   T26] audit: type=1326 audit(1551101023.607:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6013 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0xffff0000
13:23:43 executing program 1:

13:23:43 executing program 4:

13:23:43 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:43 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:43 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:43 executing program 4:

[ 2773.078299][ T6523] FAT-fs (loop5): bogus number of reserved sectors
[ 2773.097338][ T6523] FAT-fs (loop5): Can't find a valid FAT filesystem
13:23:46 executing program 4:

13:23:46 executing program 1:

13:23:46 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x0, &(0x7f0000000140), 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:46 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:46 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x3, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:46 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:46 executing program 4:

13:23:46 executing program 1:

13:23:46 executing program 4:

[ 2775.307215][ T6552] FAT-fs (loop5): bogus number of reserved sectors
[ 2775.336912][ T6552] FAT-fs (loop5): Can't find a valid FAT filesystem
13:23:46 executing program 1:

13:23:46 executing program 4:

[ 2775.441454][    C1] net_ratelimit: 23 callbacks suppressed
[ 2775.441462][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2775.453099][    C1] protocol 88fb is buggy, dev hsr_slave_1
13:23:46 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x0, &(0x7f0000000140), 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:46 executing program 1:
ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0)
memfd_create(0x0, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4000001, 0x182)
r1 = memfd_create(&(0x7f0000000180)='*\x00', 0x0)
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
keyctl$unlink(0x9, 0x0, 0x0)
write(r3, &(0x7f00000001c0), 0xfffffef3)
read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3)
ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000140)=0x4)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
getresuid(&(0x7f00000001c0), 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000500))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000001f80))
getpid()
getresuid(&(0x7f0000003200), &(0x7f0000003240), 0x0)
getresuid(&(0x7f00000032c0), &(0x7f0000003300), &(0x7f0000003340))
getuid()
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, &(0x7f0000003540))
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000003580)={{{@in6=@mcast1, @in6=@loopback}}, {{@in6}, 0x0, @in6=@mcast2}}, &(0x7f0000003680)=0xe8)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000040c0)={{{@in=@broadcast, @in=@initdev}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, 0x0)
getgroups(0x2, &(0x7f0000004200)=[0x0, 0xffffffffffffffff])
getpid()
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004240)={{{@in6=@mcast1, @in=@remote}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004340)=0xe8)
getgroups(0x3, &(0x7f0000004380)=[0xee00, 0x0, 0xffffffffffffffff])
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000043c0))
getgid()
sendmsg$netlink(r2, &(0x7f00000045c0)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x482000}, 0xc, &(0x7f0000004080)=[{&(0x7f00000036c0)={0x10, 0x16, 0x2, 0x70bd2b, 0x25dfdbfd}, 0x10}], 0x1, 0x0, 0x0, 0x24008001}, 0x4084)
ioctl$LOOP_SET_CAPACITY(r0, 0x4c07)
ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f00000005c0)=""/242)
sendfile(r0, r0, 0x0, 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f00000006c0)=""/150)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)

13:23:46 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x3d1, 0x20000004, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)

13:23:46 executing program 4:
ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0)
memfd_create(0x0, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4000001, 0x182)
r1 = memfd_create(&(0x7f0000000180)='*\x00', 0x0)
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
keyctl$unlink(0x9, 0x0, 0x0)
write(r3, &(0x7f00000001c0), 0xfffffef3)
read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3)
ioctl$PPPIOCSFLAGS1(r3, 0x40047459, 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
getresuid(&(0x7f00000001c0), 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000500))
ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000ec0))
fcntl$getownex(r0, 0x10, &(0x7f0000001f80))
getpid()
getresuid(&(0x7f0000003200), &(0x7f0000003240), 0x0)
getresuid(&(0x7f00000032c0), &(0x7f0000003300), &(0x7f0000003340))
getuid()
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, &(0x7f0000003540))
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000003580)={{{@in6=@mcast1, @in6=@loopback}}, {{@in6}, 0x0, @in6=@mcast2}}, &(0x7f0000003680)=0xe8)
getpgid(0xffffffffffffffff)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000040c0)={{{@in=@broadcast, @in=@initdev}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, 0x0)
getgroups(0x2, &(0x7f0000004200)=[0x0, 0xffffffffffffffff])
getpid()
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, 0x0, &(0x7f0000004340))
getgroups(0x2, &(0x7f0000004380)=[0x0, 0xffffffffffffffff])
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000043c0))
getgid()
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_CAPACITY(r0, 0x4c07)
ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f00000005c0)=""/242)
sendfile(r0, r0, 0x0, 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f00000006c0)=""/150)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)

[ 2775.771443][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2775.777292][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2775.783141][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2775.788936][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2775.794717][    C1] protocol 88fb is buggy, dev hsr_slave_1
13:23:46 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

[ 2776.161435][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2776.167286][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2776.173138][    C0] protocol 88fb is buggy, dev hsr_slave_0
13:23:49 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000340)=""/28, 0x224)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = syz_open_pts(0xffffffffffffffff, 0x400000)
ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000040)={0x0, 0x200, 0x3})
r2 = syz_open_dev$vbi(&(0x7f0000000480)='/dev/vbi#\x00', 0x3, 0x2)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000100)={{}, 0x0, 0x0, 0x0, {0x208001}})
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000004c0)={<r4=>0x0, @in6={{0xa, 0x4e21, 0x6, @mcast1, 0x77f04ef9}}, 0x81, 0x4}, &(0x7f0000000580)=0x90)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000005c0)={r4, 0xffff}, 0x8)
ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r5 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x0, @thr={&(0x7f0000000380)="11225870becfce1eccdb73d1c97d888f3e884e576bb80c290402dbcd719cae56b95d048a4f2a266bbc7d31417555", &(0x7f00000003c0)="3050c67c92c05eecdd447537da3e8b029f05c4a01334d4f9ea9ccc7de733c13b06b525595243a1292ffa84600d8e481869bb952eed5bf1d571dbbe7f897637444e96112d086ec4edcd68c45a0adfd565c9aa3f8c265cc73d946c78438e541c16fc83a656f88467b342ef01257452fe03f51987c335f7e72b3ecd7ddc128c1a0753ed2c2e05f38f36d8734e6b758afa8caea30d126aac1642907124"}}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r5, 0x1000000000013)
r6 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0xffffffffffff7ff7, 0x301000)
timerfd_settime(r6, 0x1, &(0x7f0000000280), &(0x7f0000000300))

13:23:49 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x0, &(0x7f0000000140), 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:49 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

13:23:49 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x72, 0x4)
setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000080), 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x0)

13:23:49 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00000000000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:49 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

[ 2778.360775][ T6821] FAT-fs (loop5): bogus number of reserved sectors
[ 2778.381454][ T6821] FAT-fs (loop5): Can't find a valid FAT filesystem
13:23:49 executing program 1:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:49 executing program 4:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
fstat(r1, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000280)='./file0\x00', 0x6, 0x1, &(0x7f00000007c0)=[{&(0x7f00000006c0)="3f0326249a955f423792f64b0f15cf2cb712c3a40c7cb868b912d24128ab0f69713275f6c52338dbf18a394afdfdf1c19d39fea7d25790164cf8681dde2ef7907e0190722b093bf856ef75ef6d354735cf4e60f5600dca51c2fa52d8db0eb94871d287a88a918a79e32b9b15b49aceafc81098c3026d77fbfdf9c1e1184859c94b23bf27363a51c6564d4aa235ed41a22a691b2c1aed59c586fe1f73b26b7c1cda2bdefd578c8a0c4b171381f64b9cbb0780e7ca7be17e87b9b5b3cb63fd3376dfa9aa4a2168cdbcd9", 0xc9}], 0x8000, &(0x7f0000000880)=ANY=[@ANYBLOB='noacl,block-allocator=no_unhashed_tion,block-allocator=notest4,acl,hash,smackfstransmute=syz1\x00,smackfsdef=syz0\x00,subj_role=*,fowner>\x00\x00\x00\x00\x00\x00', @ANYRESDEC=r2, @ANYBLOB=',\x00'])
ioctl(r1, 0x1000008914, &(0x7f0000000400)="0adc1f123c123f3188b070f15a6cb5d395421aa497961558e75b03da86059faf37330dcc85f26de4df36498fd45c7c80d58cc89baacdf7500e532c9b10a2da4ccf572088e66025d0e82ba20f2a55df5b868a1db47eed8feff1ff8647bfb4282bf524c90a3fe0687d2d216bbefa12bc752fea6a55dad11b31cddf718657f050f11d15a570ef2a45d472177fa8cbd8fc953bb4fa0d158f")
r3 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
r4 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x0, 0x400)
ioctl$TUNSETNOCSUM(r4, 0x400454c8, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000580)={0x0, 'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000004c0)=""/165, 0xa5, 0x1000, 0xfff, 0x6, 0x40, 0x2}, 0x120)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$ax25(r4, &(0x7f0000000300)={{0x3, @bcast, 0x2}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}, &(0x7f0000000100)=0x10)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
fcntl$addseals(r0, 0x409, 0x1)
tkill(r3, 0x1000000000013)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f0000000a00)={{0x20, 0x4}, {0x100, 0x4}, 0x3, 0x1, 0x8})
getsockname$ax25(r4, &(0x7f0000000940)={{}, [@rose, @rose, @null, @remote, @bcast, @rose, @rose, @rose]}, &(0x7f00000009c0)=0x48)

13:23:49 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:49 executing program 4:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
fstat(r1, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000280)='./file0\x00', 0x6, 0x1, &(0x7f00000007c0)=[{&(0x7f00000006c0)="3f0326249a955f423792f64b0f15cf2cb712c3a40c7cb868b912d24128ab0f69713275f6c52338dbf18a394afdfdf1c19d39fea7d25790164cf8681dde2ef7907e0190722b093bf856ef75ef6d354735cf4e60f5600dca51c2fa52d8db0eb94871d287a88a918a79e32b9b15b49aceafc81098c3026d77fbfdf9c1e1184859c94b23bf27363a51c6564d4aa235ed41a22a691b2c1aed59c586fe1f73b26b7c1cda2bdefd578c8a0c4b171381f64b9cbb0780e7ca7be17e87b9b5b3cb63fd3376dfa9aa4a2168cdbcd9", 0xc9}], 0x8000, &(0x7f0000000880)=ANY=[@ANYBLOB='noacl,block-allocator=no_unhashed_tion,block-allocator=notest4,acl,hash,smackfstransmute=syz1\x00,smackfsdef=syz0\x00,subj_role=*,fowner>\x00\x00\x00\x00\x00\x00', @ANYRESDEC=r2, @ANYBLOB=',\x00'])
ioctl(r1, 0x1000008914, &(0x7f0000000400)="0adc1f123c123f3188b070f15a6cb5d395421aa497961558e75b03da86059faf37330dcc85f26de4df36498fd45c7c80d58cc89baacdf7500e532c9b10a2da4ccf572088e66025d0e82ba20f2a55df5b868a1db47eed8feff1ff8647bfb4282bf524c90a3fe0687d2d216bbefa12bc752fea6a55dad11b31cddf718657f050f11d15a570ef2a45d472177fa8cbd8fc953bb4fa0d158f")
r3 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
r4 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x0, 0x400)
ioctl$TUNSETNOCSUM(r4, 0x400454c8, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000580)={0x0, 'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000004c0)=""/165, 0xa5, 0x1000, 0xfff, 0x6, 0x40, 0x2}, 0x120)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$ax25(r4, &(0x7f0000000300)={{0x3, @bcast, 0x2}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}, &(0x7f0000000100)=0x10)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
fcntl$addseals(r0, 0x409, 0x1)
tkill(r3, 0x1000000000013)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f0000000a00)={{0x20, 0x4}, {0x100, 0x4}, 0x3, 0x1, 0x8})
getsockname$ax25(r4, &(0x7f0000000940)={{}, [@rose, @rose, @null, @remote, @bcast, @rose, @rose, @rose]}, &(0x7f00000009c0)=0x48)

[ 2778.623703][ T7048] FAT-fs (loop5): bogus number of reserved sectors
[ 2778.630579][ T7048] FAT-fs (loop5): Can't find a valid FAT filesystem
13:23:49 executing program 1:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000280))
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:49 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

[ 2778.932934][ T7264] FAT-fs (loop5): bogus number of reserved sectors
[ 2778.940172][ T7264] FAT-fs (loop5): Can't find a valid FAT filesystem
13:23:50 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x40000, 0x0)
tkill(r2, 0x1000000000013)

13:23:50 executing program 4:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
fstat(r1, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000280)='./file0\x00', 0x6, 0x1, &(0x7f00000007c0)=[{&(0x7f00000006c0)="3f0326249a955f423792f64b0f15cf2cb712c3a40c7cb868b912d24128ab0f69713275f6c52338dbf18a394afdfdf1c19d39fea7d25790164cf8681dde2ef7907e0190722b093bf856ef75ef6d354735cf4e60f5600dca51c2fa52d8db0eb94871d287a88a918a79e32b9b15b49aceafc81098c3026d77fbfdf9c1e1184859c94b23bf27363a51c6564d4aa235ed41a22a691b2c1aed59c586fe1f73b26b7c1cda2bdefd578c8a0c4b171381f64b9cbb0780e7ca7be17e87b9b5b3cb63fd3376dfa9aa4a2168cdbcd9", 0xc9}], 0x8000, &(0x7f0000000880)=ANY=[@ANYBLOB='noacl,block-allocator=no_unhashed_tion,block-allocator=notest4,acl,hash,smackfstransmute=syz1\x00,smackfsdef=syz0\x00,subj_role=*,fowner>\x00\x00\x00\x00\x00\x00', @ANYRESDEC=r2, @ANYBLOB=',\x00'])
ioctl(r1, 0x1000008914, &(0x7f0000000400)="0adc1f123c123f3188b070f15a6cb5d395421aa497961558e75b03da86059faf37330dcc85f26de4df36498fd45c7c80d58cc89baacdf7500e532c9b10a2da4ccf572088e66025d0e82ba20f2a55df5b868a1db47eed8feff1ff8647bfb4282bf524c90a3fe0687d2d216bbefa12bc752fea6a55dad11b31cddf718657f050f11d15a570ef2a45d472177fa8cbd8fc953bb4fa0d158f")
r3 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
r4 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x0, 0x400)
ioctl$TUNSETNOCSUM(r4, 0x400454c8, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000580)={0x0, 'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000004c0)=""/165, 0xa5, 0x1000, 0xfff, 0x6, 0x40, 0x2}, 0x120)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$ax25(r4, &(0x7f0000000300)={{0x3, @bcast, 0x2}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}, &(0x7f0000000100)=0x10)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
fcntl$addseals(r0, 0x409, 0x1)
tkill(r3, 0x1000000000013)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f0000000a00)={{0x20, 0x4}, {0x100, 0x4}, 0x3, 0x1, 0x8})
getsockname$ax25(r4, &(0x7f0000000940)={{}, [@rose, @rose, @null, @remote, @bcast, @rose, @rose, @rose]}, &(0x7f00000009c0)=0x48)

13:23:50 executing program 1:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000280))
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:50 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:50 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:50 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

[ 2779.371893][ T7283] FAT-fs (loop5): bogus number of reserved sectors
[ 2779.391611][ T7283] FAT-fs (loop5): Can't find a valid FAT filesystem
13:23:50 executing program 4:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000280))
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:50 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:50 executing program 1:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000280))
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000380))
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:50 executing program 4:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000280))
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

[ 2779.685721][ T7559] FAT-fs (loop5): bogus number of reserved sectors
[ 2779.706114][ T7559] FAT-fs (loop5): Can't find a valid FAT filesystem
13:23:50 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

[ 2779.892815][ T7598] FAT-fs (loop5): bogus number of reserved sectors
[ 2779.905261][ T7598] FAT-fs (loop5): Can't find a valid FAT filesystem
13:23:50 executing program 1:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000280))
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000380)={0x0, <r2=>0x0})
capset(&(0x7f00000003c0)={0x0, r2}, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:51 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040))
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:51 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:51 executing program 1:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000280))
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000380)={0x0, <r2=>0x0})
capset(&(0x7f00000003c0)={0x0, r2}, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:51 executing program 4:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000280))
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

[ 2780.227843][ T7495] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2780.238466][ T7495] FAT-fs (loop4): Filesystem has been set read-only
[ 2780.318711][ T7690] FAT-fs (loop5): bogus number of reserved sectors
13:23:51 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:51 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

[ 2780.456132][ T7690] FAT-fs (loop5): Can't find a valid FAT filesystem
13:23:51 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:51 executing program 1:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000280))
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000380)={0x0, <r2=>0x0})
capset(&(0x7f00000003c0)={0x0, r2}, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

[ 2780.628382][ T7825] FAT-fs (loop5): bogus number of reserved sectors
[ 2780.653340][ T7825] FAT-fs (loop5): Can't find a valid FAT filesystem
13:23:51 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:51 executing program 4:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000280))
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000380)={0x0, <r2=>0x0})
capset(&(0x7f00000003c0)={0x0, r2}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:51 executing program 1:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000280))
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000380)={0x0, <r2=>0x0})
capset(&(0x7f00000003c0)={0x0, r2}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

[ 2780.910499][ T7835] FAT-fs (loop5): bogus number of reserved sectors
[ 2780.930023][ T7495] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2780.936552][ T7835] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2780.941148][ T7495] FAT-fs (loop4): Filesystem has been set read-only
13:23:51 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:51 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
r3 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x4b, 0x8002)
ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f0000000100))
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000400)={0xfffffffeffffffff, 0x3, 'client0\x00', 0x0, "f0aa5da4cde09833", "2757be7c704fe2f711522f26c5f4f1fe78915d6a743d9aeebe8eb53377160f18", 0x5, 0x81})
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:51 executing program 4:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000280))
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000380)={0x0, <r2=>0x0})
capset(&(0x7f00000003c0)={0x0, r2}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

[ 2781.192923][ T7951] FAT-fs (loop5): bogus number of reserved sectors
13:23:52 executing program 1:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000280))
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000380)={0x0, <r2=>0x0})
capset(&(0x7f00000003c0)={0x0, r2}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
fcntl$getownex(r1, 0x10, &(0x7f00000002c0))
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

[ 2781.239165][ T7951] FAT-fs (loop5): Can't find a valid FAT filesystem
13:23:52 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:52 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:52 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:52 executing program 1:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000280))
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000380)={0x0, <r2=>0x0})
capset(&(0x7f00000003c0)={0x0, r2}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
fcntl$getownex(r1, 0x10, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

[ 2781.558377][ T8087] FAT-fs (loop5): invalid media value (0x00)
[ 2781.565655][ T8087] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2781.681449][    C1] net_ratelimit: 23 callbacks suppressed
[ 2781.681457][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2781.693155][    C1] protocol 88fb is buggy, dev hsr_slave_1
13:23:52 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:52 executing program 4:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000280))
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000380)={0x0, <r2=>0x0})
capset(&(0x7f00000003c0)={0x0, r2}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

[ 2781.870406][ T8103] FAT-fs (loop5): invalid media value (0x00)
[ 2781.894472][ T8103] FAT-fs (loop5): Can't find a valid FAT filesystem
13:23:52 executing program 1:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000280))
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000380)={0x0, <r2=>0x0})
capset(&(0x7f00000003c0)={0x0, r2}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
fcntl$getownex(r1, 0x10, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

[ 2781.914475][ T7495] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2781.925097][ T7495] FAT-fs (loop4): Filesystem has been set read-only
[ 2782.001463][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2782.007435][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2782.013235][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2782.019039][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2782.024823][    C1] protocol 88fb is buggy, dev hsr_slave_1
13:23:52 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:52 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0xd}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

[ 2782.221481][ T8197] FAT-fs (loop5): invalid media value (0x00)
[ 2782.227658][ T8197] FAT-fs (loop5): Can't find a valid FAT filesystem
13:23:53 executing program 4:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(r1, &(0x7f0000000100)=@hci, &(0x7f0000000040)=0x80, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f0000000300)='./file0\x00', 0xfffffffffffff5ea, 0x2, &(0x7f0000000500)=[{&(0x7f0000000340)="97c7ce68ff6c1b82cf80c68f915c5efc5b304bf7c2b689e7352db4164977855a72acf0198f1ac51bf4a53d9467e965", 0x2f, 0x80}, {&(0x7f0000000400)="cbdf3bd45ae2c11822d17d7d23f313b93487938ededb4a99f95539571b3f4d2709494cbaf9f3886c4713b75bba1b047aea3eef64c057130ab396b7d4418ced6f160469735c418057d9ed0f1795f4f8268ef45ee93e35453842e17c5bf0726babcdd48e3df8fd7bb4604389ebc7e1c3bc80a69227a317317c7dec774e835479bd036ab2fd102ec5a0361d59b3e882eeff281cde2e8190c65372d976b7a7de2919b13ea7ecf76a7f21322f6b8588cc56f4aa4e7590965db78305e17149203ae64436b1fb267aa8a70ccbc017e83b2f9e4ca17842c6d30bce41dc477a93f413a2c57d802154ad006e8c88727b00", 0xec, 0x1f}], 0x1000000, &(0x7f0000000540)={[{@tails_off='tails=off'}, {@grpjquota='grpjquota'}, {@commit={'commit', 0x3d, 0xe8}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'md5sum'}}, {@dont_measure='dont_measure'}]})
r3 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r3, 0x1000000000013)

13:23:53 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:53 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(&(0x7f0000000180)='iso9660\x00', &(0x7f00000001c0)='./file0\x00', 0xa4d8, 0x4, &(0x7f0000000900)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x800000, &(0x7f0000000a00)=ANY=[@ANYBLOB="646d6f64653d3078303030303030303030303030303030392c6d61703d6f66662c6e6f636f6d70726573732c626c6f63c538e450b028fcaf3030303030303030303830302c6e6f726f636b2c6d61703d070000000000000063746f723d3078303030303030303030303030303366662c6d61703d6f66662c6d61703d6e6f726d616c2c61756469742c66736d616769633d30"])

13:23:53 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

[ 2782.373494][ T8234] FAT-fs (loop5): invalid media value (0x00)
[ 2782.389045][ T8234] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2782.401687][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2782.407935][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2782.414225][    C0] protocol 88fb is buggy, dev hsr_slave_0
13:23:53 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:53 executing program 4:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(r1, &(0x7f0000000100)=@hci, &(0x7f0000000040)=0x80, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f0000000300)='./file0\x00', 0xfffffffffffff5ea, 0x2, &(0x7f0000000500)=[{&(0x7f0000000340)="97c7ce68ff6c1b82cf80c68f915c5efc5b304bf7c2b689e7352db4164977855a72acf0198f1ac51bf4a53d9467e965", 0x2f, 0x80}, {&(0x7f0000000400)="cbdf3bd45ae2c11822d17d7d23f313b93487938ededb4a99f95539571b3f4d2709494cbaf9f3886c4713b75bba1b047aea3eef64c057130ab396b7d4418ced6f160469735c418057d9ed0f1795f4f8268ef45ee93e35453842e17c5bf0726babcdd48e3df8fd7bb4604389ebc7e1c3bc80a69227a317317c7dec774e835479bd036ab2fd102ec5a0361d59b3e882eeff281cde2e8190c65372d976b7a7de2919b13ea7ecf76a7f21322f6b8588cc56f4aa4e7590965db78305e17149203ae64436b1fb267aa8a70ccbc017e83b2f9e4ca17842c6d30bce41dc477a93f413a2c57d802154ad006e8c88727b00", 0xec, 0x1f}], 0x1000000, &(0x7f0000000540)={[{@tails_off='tails=off'}, {@grpjquota='grpjquota'}, {@commit={'commit', 0x3d, 0xe8}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'md5sum'}}, {@dont_measure='dont_measure'}]})
r3 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r3, 0x1000000000013)

13:23:53 executing program 1:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x0, 0x20003)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000300)={0xf, {0x8000, 0x9, 0xf4000}, {0x4}, {0xfffffffffffffffb}})
socket(0x14, 0x200000000805, 0x80)
mknodat(r0, &(0x7f0000000100)='.\x00', 0x1000, 0x40)
ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f00000002c0)={0x1, r1})
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0)
write$cgroup_int(r2, &(0x7f0000000080)=0xffffff7f, 0x297ef)
linkat(r2, &(0x7f0000000000)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x1000)
setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000040)={@empty, @empty}, 0xc)
ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f00000004c0)={[], 0x5f97, 0x1, 0x1f, 0x0, 0x8, 0x0, 0x103000, [], 0x2})
read$eventfd(r0, &(0x7f0000000140), 0xffffffffffffffa0)
mremap(&(0x7f00001fd000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000d0a000/0x2000)=nil)
ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000240)=0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, @perf_config_ext={0xff, 0x400}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @loopback}, 0x10)
syz_open_procfs(0x0, &(0x7f0000000040)='net/udplite\x00')

13:23:53 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:53 executing program 4:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(r1, &(0x7f0000000100)=@hci, &(0x7f0000000040)=0x80, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f0000000300)='./file0\x00', 0xfffffffffffff5ea, 0x2, &(0x7f0000000500)=[{&(0x7f0000000340)="97c7ce68ff6c1b82cf80c68f915c5efc5b304bf7c2b689e7352db4164977855a72acf0198f1ac51bf4a53d9467e965", 0x2f, 0x80}, {&(0x7f0000000400)="cbdf3bd45ae2c11822d17d7d23f313b93487938ededb4a99f95539571b3f4d2709494cbaf9f3886c4713b75bba1b047aea3eef64c057130ab396b7d4418ced6f160469735c418057d9ed0f1795f4f8268ef45ee93e35453842e17c5bf0726babcdd48e3df8fd7bb4604389ebc7e1c3bc80a69227a317317c7dec774e835479bd036ab2fd102ec5a0361d59b3e882eeff281cde2e8190c65372d976b7a7de2919b13ea7ecf76a7f21322f6b8588cc56f4aa4e7590965db78305e17149203ae64436b1fb267aa8a70ccbc017e83b2f9e4ca17842c6d30bce41dc477a93f413a2c57d802154ad006e8c88727b00", 0xec, 0x1f}], 0x1000000, &(0x7f0000000540)={[{@tails_off='tails=off'}, {@grpjquota='grpjquota'}, {@commit={'commit', 0x3d, 0xe8}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'md5sum'}}, {@dont_measure='dont_measure'}]})
r3 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r3, 0x1000000000013)

[ 2782.719379][ T8419] FAT-fs (loop5): invalid media value (0x00)
[ 2782.745157][ T8419] FAT-fs (loop5): Can't find a valid FAT filesystem
13:23:53 executing program 1:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x0, 0x20003)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000300)={0xf, {0x8000, 0x9, 0xf4000}, {0x4}, {0xfffffffffffffffb}})
socket(0x14, 0x200000000805, 0x80)
mknodat(r0, &(0x7f0000000100)='.\x00', 0x1000, 0x40)
ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f00000002c0)={0x1, r1})
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0)
write$cgroup_int(r2, &(0x7f0000000080)=0xffffff7f, 0x297ef)
linkat(r2, &(0x7f0000000000)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x1000)
setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000040)={@empty, @empty}, 0xc)
ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f00000004c0)={[], 0x5f97, 0x1, 0x1f, 0x0, 0x8, 0x0, 0x103000, [], 0x2})
read$eventfd(r0, &(0x7f0000000140), 0xffffffffffffffa0)
mremap(&(0x7f00001fd000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000d0a000/0x2000)=nil)
ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000240)=0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, @perf_config_ext={0xff, 0x400}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @loopback}, 0x10)
syz_open_procfs(0x0, &(0x7f0000000040)='net/udplite\x00')

13:23:53 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x3)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x4b96cd0a587f829c, 0x0)
ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f0000000140)={0x4, &(0x7f00000000c0)=[{0x7, 0xf2, 0x1f, 0xe39}, {0xfff, 0x4, 0x0, 0x3}, {0x8, 0x1, 0x32c, 0x6}, {0x0, 0x7, 0x80000001, 0x6}]})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x31, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
fsetxattr$security_selinux(r2, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:apt_var_log_t:s0\x00', 0x23, 0x3)

13:23:55 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380)={{0x0, 0x1000000000000000}})
r2 = accept4(r1, 0x0, &(0x7f0000000000), 0x800)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r3=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000280)={r3, 0x1, 0x6, @local}, 0x10)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f123c12656defc570297426284ebcd791c7b380f0")
r4 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
fstatfs(r0, &(0x7f0000000040)=""/19)
timer_settime(0x0, 0x4, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r4, 0x1000000000013)

13:23:55 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:55 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0xfffffffffffffffe, 0x8000)
ioctl$RTC_WIE_OFF(r1, 0x7010)
pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfe, 0x81}, 0x6)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
fcntl$setlease(r0, 0x400, 0x3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0xfffffffffffffff7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000100)=<r5=>0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000480)={0x2, 0x3}, 0x30d)
unshare(0x20400)
r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x2a0000, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00')
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r6, 0x810c5701, &(0x7f0000000540))
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10400}, 0xaa0bcf035a05fc76, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYPTR=&(0x7f0000000140)=ANY=[@ANYRESOCT=r4, @ANYRESDEC=r4, @ANYRESHEX=0x0]], 0x1}, 0x1, 0x0, 0x0, 0x48000}, 0x803)
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r3, 0x800442d4, &(0x7f0000000240)=0x1ff)
pipe2(&(0x7f00000004c0)={<r7=>0xffffffffffffffff}, 0xfffffffffffffffc)
keyctl$session_to_parent(0x12)
clock_gettime(0xfffffffffffffffe, &(0x7f0000000440))
ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x401, 0x5, 0x1, 0x1b})
mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000)
modify_ldt$read_default(0x2, &(0x7f0000000780)=""/4096, 0x1000)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r7, 0x80dc5521, &(0x7f0000001900)=""/182)
r8 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
ioctl$BLKTRACESTART(r8, 0x1274, 0x0)
ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x1, 0xbd, 0x279d, 0x0, 0x0, r5})

13:23:55 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x3)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x4b96cd0a587f829c, 0x0)
ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f0000000140)={0x4, &(0x7f00000000c0)=[{0x7, 0xf2, 0x1f, 0xe39}, {0xfff, 0x4, 0x0, 0x3}, {0x8, 0x1, 0x32c, 0x6}, {0x0, 0x7, 0x80000001, 0x6}]})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x31, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
fsetxattr$security_selinux(r2, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:apt_var_log_t:s0\x00', 0x23, 0x3)

13:23:55 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:55 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

[ 2785.272829][ T8601] FAT-fs (loop5): invalid media value (0x00)
[ 2785.290921][ T8601] FAT-fs (loop5): Can't find a valid FAT filesystem
13:23:56 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0xfffffffffffffffe, 0x8000)
ioctl$RTC_WIE_OFF(r1, 0x7010)
pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfe, 0x81}, 0x6)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
fcntl$setlease(r0, 0x400, 0x3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0xfffffffffffffff7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000100)=<r5=>0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000480)={0x2, 0x3}, 0x30d)
unshare(0x20400)
r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x2a0000, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00')
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r6, 0x810c5701, &(0x7f0000000540))
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10400}, 0xaa0bcf035a05fc76, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYPTR=&(0x7f0000000140)=ANY=[@ANYRESOCT=r4, @ANYRESDEC=r4, @ANYRESHEX=0x0]], 0x1}, 0x1, 0x0, 0x0, 0x48000}, 0x803)
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r3, 0x800442d4, &(0x7f0000000240)=0x1ff)
pipe2(&(0x7f00000004c0)={<r7=>0xffffffffffffffff}, 0xfffffffffffffffc)
keyctl$session_to_parent(0x12)
clock_gettime(0xfffffffffffffffe, &(0x7f0000000440))
ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x401, 0x5, 0x1, 0x1b})
mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000)
modify_ldt$read_default(0x2, &(0x7f0000000780)=""/4096, 0x1000)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r7, 0x80dc5521, &(0x7f0000001900)=""/182)
r8 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
ioctl$BLKTRACESTART(r8, 0x1274, 0x0)
ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x1, 0xbd, 0x279d, 0x0, 0x0, r5})

13:23:56 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x3)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x4b96cd0a587f829c, 0x0)
ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f0000000140)={0x4, &(0x7f00000000c0)=[{0x7, 0xf2, 0x1f, 0xe39}, {0xfff, 0x4, 0x0, 0x3}, {0x8, 0x1, 0x32c, 0x6}, {0x0, 0x7, 0x80000001, 0x6}]})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x31, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
fsetxattr$security_selinux(r2, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:apt_var_log_t:s0\x00', 0x23, 0x3)

13:23:56 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:56 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0xfffffffffffffffe, 0x8000)
ioctl$RTC_WIE_OFF(r1, 0x7010)
pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfe, 0x81}, 0x6)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
fcntl$setlease(r0, 0x400, 0x3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0xfffffffffffffff7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000100)=<r5=>0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000480)={0x2, 0x3}, 0x30d)
unshare(0x20400)
r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x2a0000, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00')
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r6, 0x810c5701, &(0x7f0000000540))
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10400}, 0xaa0bcf035a05fc76, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYPTR=&(0x7f0000000140)=ANY=[@ANYRESOCT=r4, @ANYRESDEC=r4, @ANYRESHEX=0x0]], 0x1}, 0x1, 0x0, 0x0, 0x48000}, 0x803)
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r3, 0x800442d4, &(0x7f0000000240)=0x1ff)
pipe2(&(0x7f00000004c0)={<r7=>0xffffffffffffffff}, 0xfffffffffffffffc)
keyctl$session_to_parent(0x12)
clock_gettime(0xfffffffffffffffe, &(0x7f0000000440))
ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x401, 0x5, 0x1, 0x1b})
mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000)
modify_ldt$read_default(0x2, &(0x7f0000000780)=""/4096, 0x1000)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r7, 0x80dc5521, &(0x7f0000001900)=""/182)
r8 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
ioctl$BLKTRACESTART(r8, 0x1274, 0x0)
ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x1, 0xbd, 0x279d, 0x0, 0x0, r5})

13:23:56 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x3)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x4b96cd0a587f829c, 0x0)
ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f0000000140)={0x4, &(0x7f00000000c0)=[{0x7, 0xf2, 0x1f, 0xe39}, {0xfff, 0x4, 0x0, 0x3}, {0x8, 0x1, 0x32c, 0x6}, {0x0, 0x7, 0x80000001, 0x6}]})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x31, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2785.637592][ T8826] FAT-fs (loop5): invalid media value (0x00)
13:23:56 executing program 1:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x842, 0x0)
accept4$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000012c0)=0x14, 0x800)
connect$packet(r0, &(0x7f0000001300)={0x11, 0xf9, r1, 0x1, 0x3d1c}, 0x14)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000100)={0x1, 0x50114fc, 0x400})
write$UHID_INPUT(r0, &(0x7f0000000180)={0x8, "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", 0x1000}, 0x1006)
fgetxattr(r0, &(0x7f00000000c0)=@known='user.syz\x00', &(0x7f00000011c0)=""/207, 0xcf)
openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x600081, 0x0)
setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080)=0x6, 0x4)

[ 2785.734932][ T8826] FAT-fs (loop5): Can't find a valid FAT filesystem
13:23:57 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f0000000440)=""/156)
r3 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x4800)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x80, r5, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x957}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x52}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr="9e43b0b45f257a9d8df1d78005ba842f"}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000045}, 0x24004050)
tkill(r3, 0x1000000000013)

13:23:57 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x3)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x4b96cd0a587f829c, 0x0)
ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f0000000140)={0x4, &(0x7f00000000c0)=[{0x7, 0xf2, 0x1f, 0xe39}, {0xfff, 0x4, 0x0, 0x3}, {0x8, 0x1, 0x32c, 0x6}, {0x0, 0x7, 0x80000001, 0x6}]})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:23:57 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:57 executing program 1:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x842, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000180)={0x8, "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", 0x1000}, 0x1006)
r1 = msgget$private(0x0, 0x10)
msgctl$IPC_INFO(r1, 0x3, &(0x7f00000011c0)=""/238)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000000)={0x0, 0x29f, 0x5, 0x3fc})

13:23:57 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:57 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:57 executing program 1:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x842, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000180)={0x8, "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", 0x1009}, 0x1006)

[ 2786.387704][ T8861] FAT-fs (loop5): invalid media value (0x00)
[ 2786.406427][ T8861] FAT-fs (loop5): Can't find a valid FAT filesystem
13:23:57 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x3)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x4b96cd0a587f829c, 0x0)
ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000140)={0x4, &(0x7f00000000c0)=[{0x7, 0xf2, 0x1f, 0xe39}, {0xfff, 0x4, 0x0, 0x3}, {0x8, 0x1, 0x32c, 0x6}, {0x0, 0x7, 0x80000001, 0x6}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:23:57 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:57 executing program 1:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x24000, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={<r1=>0x0}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e24, 0x2557, @rand_addr="d33fd3bbd86387c3a1da2a2bb5a20d34"}}, 0x80000000, 0xacb, 0x9, 0xa6, 0x7}, &(0x7f0000000200)=0x98)
r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x4, 0x40000400000)
ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x31, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

13:23:57 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x3)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x4b96cd0a587f829c, 0x0)
ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000140)={0x4, &(0x7f00000000c0)=[{0x7, 0xf2, 0x1f, 0xe39}, {0xfff, 0x4, 0x0, 0x3}, {0x8, 0x1, 0x32c, 0x6}, {0x0, 0x7, 0x80000001, 0x6}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2786.650762][ T8886] FAT-fs (loop5): invalid media value (0x00)
[ 2786.680195][ T8886] FAT-fs (loop5): Can't find a valid FAT filesystem
13:23:57 executing program 1:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x842, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000180)={0x8, "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", 0x1000}, 0x1006)

13:23:58 executing program 1:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x842, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000180)={0x8, "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", 0x1000}, 0x1006)

13:23:58 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(0x0, 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:58 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000017)

13:23:58 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x3)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x4b96cd0a587f829c, 0x0)
ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000140)={0x4, &(0x7f00000000c0)=[{0x7, 0xf2, 0x1f, 0xe39}, {0xfff, 0x4, 0x0, 0x3}, {0x8, 0x1, 0x32c, 0x6}, {0x0, 0x7, 0x80000001, 0x6}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:23:58 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00000000000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:58 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:58 executing program 1:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x842, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000180)={0x8, "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", 0x1000}, 0x1006)

13:23:58 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(0x0, 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:58 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x3)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x4b96cd0a587f829c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:23:58 executing program 1:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x842, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000180)={0x8, "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", 0x1000}, 0x1006)

13:23:58 executing program 1:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x842, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000180)={0x5, "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", 0x1000}, 0x1006)

13:23:58 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x3)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:23:58 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(0x0, 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:58 executing program 1 (fault-call:3 fault-nth:0):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

[ 2787.771203][ T9158] FAULT_INJECTION: forcing a failure.
[ 2787.771203][ T9158] name failslab, interval 1, probability 0, space 0, times 0
[ 2787.800510][ T9158] CPU: 0 PID: 9158 Comm: syz-executor.1 Not tainted 5.0.0-rc7-next-20190225 #42
[ 2787.809554][ T9158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2787.819605][ T9158] Call Trace:
[ 2787.822909][ T9158]  dump_stack+0x172/0x1f0
[ 2787.827234][ T9158]  should_fail.cold+0xa/0x15
[ 2787.831813][ T9158]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 2787.837606][ T9158]  ? ___might_sleep+0x163/0x280
[ 2787.842448][ T9158]  __should_failslab+0x121/0x190
[ 2787.847454][ T9158]  should_failslab+0x9/0x14
[ 2787.851937][ T9158]  kmem_cache_alloc_trace+0x2d1/0x760
[ 2787.857302][ T9158]  ? kasan_check_read+0x11/0x20
[ 2787.862136][ T9158]  alloc_pipe_info+0xb9/0x430
[ 2787.866814][ T9158]  splice_direct_to_actor+0x775/0x970
[ 2787.872231][ T9158]  ? common_file_perm+0x238/0x720
[ 2787.877235][ T9158]  ? generic_pipe_buf_nosteal+0x10/0x10
[ 2787.882782][ T9158]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2787.889015][ T9158]  ? do_splice_to+0x190/0x190
[ 2787.893687][ T9158]  ? rw_verify_area+0x118/0x360
[ 2787.898520][ T9158]  do_splice_direct+0x1da/0x2a0
[ 2787.903436][ T9158]  ? splice_direct_to_actor+0x970/0x970
[ 2787.908961][ T9158]  ? rw_verify_area+0x118/0x360
[ 2787.913802][ T9158]  do_sendfile+0x597/0xd00
[ 2787.918204][ T9158]  ? do_compat_pwritev64+0x1c0/0x1c0
[ 2787.921450][    C1] net_ratelimit: 23 callbacks suppressed
[ 2787.921458][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2787.923477][ T9158]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 2787.929127][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2787.935236][ T9158]  ? _copy_from_user+0xdd/0x150
[ 2787.935257][ T9158]  __x64_sys_sendfile64+0x15a/0x220
[ 2787.935275][ T9158]  ? __ia32_sys_sendfile+0x230/0x230
[ 2787.962423][ T9158]  ? do_syscall_64+0x26/0x610
[ 2787.967081][ T9158]  ? lockdep_hardirqs_on+0x418/0x5d0
[ 2787.972342][ T9158]  ? trace_hardirqs_on+0x67/0x230
[ 2787.977346][ T9158]  do_syscall_64+0x103/0x610
[ 2787.981919][ T9158]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2787.987803][ T9158] RIP: 0033:0x457e29
[ 2787.991681][ T9158] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2788.011259][ T9158] RSP: 002b:00007fd214b76c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2788.019647][ T9158] RAX: ffffffffffffffda RBX: 00007fd214b76c90 RCX: 0000000000457e29
[ 2788.027598][ T9158] RDX: 0000000020000000 RSI: 0000000000000004 RDI: 0000000000000003
[ 2788.035550][ T9158] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 2788.043500][ T9158] R10: 0000000000000011 R11: 0000000000000246 R12: 00007fd214b776d4
[ 2788.051451][ T9158] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 0000000000000005
13:23:59 executing program 1 (fault-call:3 fault-nth:1):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:23:59 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r0, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

[ 2788.241437][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2788.247258][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2788.253114][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2788.258876][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2788.264639][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2788.308219][ T9279] FAULT_INJECTION: forcing a failure.
[ 2788.308219][ T9279] name failslab, interval 1, probability 0, space 0, times 0
[ 2788.359031][ T9279] CPU: 1 PID: 9279 Comm: syz-executor.1 Not tainted 5.0.0-rc7-next-20190225 #42
[ 2788.368112][ T9279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2788.378170][ T9279] Call Trace:
[ 2788.381452][ T9279]  dump_stack+0x172/0x1f0
[ 2788.385768][ T9279]  should_fail.cold+0xa/0x15
[ 2788.390345][ T9279]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 2788.396229][ T9279]  ? ___might_sleep+0x163/0x280
[ 2788.401066][ T9279]  __should_failslab+0x121/0x190
[ 2788.405986][ T9279]  should_failslab+0x9/0x14
[ 2788.410587][ T9279]  __kmalloc+0x2dc/0x740
[ 2788.414809][ T9279]  ? kmem_cache_alloc_trace+0x354/0x760
[ 2788.420348][ T9279]  ? kasan_check_read+0x11/0x20
[ 2788.425192][ T9279]  ? alloc_pipe_info+0x199/0x430
[ 2788.430120][ T9279]  alloc_pipe_info+0x199/0x430
[ 2788.434888][ T9279]  splice_direct_to_actor+0x775/0x970
[ 2788.440240][ T9279]  ? common_file_perm+0x238/0x720
[ 2788.445244][ T9279]  ? generic_pipe_buf_nosteal+0x10/0x10
[ 2788.450775][ T9279]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2788.456997][ T9279]  ? do_splice_to+0x190/0x190
[ 2788.461654][ T9279]  ? rw_verify_area+0x118/0x360
[ 2788.466484][ T9279]  do_splice_direct+0x1da/0x2a0
[ 2788.471323][ T9279]  ? splice_direct_to_actor+0x970/0x970
[ 2788.476860][ T9279]  ? rw_verify_area+0x118/0x360
[ 2788.481688][ T9279]  do_sendfile+0x597/0xd00
[ 2788.486113][ T9279]  ? do_compat_pwritev64+0x1c0/0x1c0
[ 2788.491386][ T9279]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 2788.497599][ T9279]  ? _copy_from_user+0xdd/0x150
[ 2788.502426][ T9279]  __x64_sys_sendfile64+0x15a/0x220
[ 2788.507608][ T9279]  ? __ia32_sys_sendfile+0x230/0x230
[ 2788.512969][ T9279]  ? do_syscall_64+0x26/0x610
[ 2788.517623][ T9279]  ? lockdep_hardirqs_on+0x418/0x5d0
[ 2788.522899][ T9279]  ? trace_hardirqs_on+0x67/0x230
[ 2788.527907][ T9279]  do_syscall_64+0x103/0x610
[ 2788.532480][ T9279]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2788.538348][ T9279] RIP: 0033:0x457e29
13:23:59 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

[ 2788.542232][ T9279] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2788.561821][ T9279] RSP: 002b:00007fd214b76c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2788.570216][ T9279] RAX: ffffffffffffffda RBX: 00007fd214b76c90 RCX: 0000000000457e29
[ 2788.578259][ T9279] RDX: 0000000020000000 RSI: 0000000000000004 RDI: 0000000000000003
[ 2788.586207][ T9279] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 2788.594155][ T9279] R10: 0000000000000011 R11: 0000000000000246 R12: 00007fd214b776d4
[ 2788.602114][ T9279] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 0000000000000005
13:23:59 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x3)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:23:59 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:23:59 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x8000, 0x40)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000100)={<r3=>0x0, 0x3}, &(0x7f0000000140)=0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000540)=ANY=[@ANYBLOB="000000004398ce218f2cf8ffffffffffffff3f9567b0b7480100008000000000fb706954d6a67c8eeedc1098fa81a1869c73469433e5ebbfc7f41e43d6823bce8bfba63cf3e1f16ca8b460e5592e4cdba7f510d6846a433ad9cf1a83362a41691167b1dd3a982e1b3f9c8b588508", @ANYRES32=0x0, @ANYRES32=<r4=>0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=<r5=>0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000300)=0x20)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000004c0)={0x5, 0x24e800000000000, 0x1, 0x1f, 0xff, 0x1, 0x5, 0x0, r5}, &(0x7f0000000500)=0x20)
getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000400)={r3, 0x10001, 0x746c709d, 0x6c75f357, 0x100000000, 0x3ff, 0x800, 0x0, {r4, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xffff, 0x81, 0x0, 0x0, 0x5}}, &(0x7f0000000340)=0xb0)
r6 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r6, 0x1000000000013)

[ 2788.641431][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2788.647349][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2788.653171][    C0] protocol 88fb is buggy, dev hsr_slave_0
13:23:59 executing program 1 (fault-call:3 fault-nth:2):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:23:59 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:23:59 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000)=0x2, 0x11)

13:23:59 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r0, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:23:59 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x3)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:23:59 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000)=0x7, 0x11)

13:23:59 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000)=0x8, 0x11)

13:23:59 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r0, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:24:00 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:00 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x3)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:00 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:00 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000)=0x10, 0x11)

13:24:00 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:24:00 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000300)=<r2=>0x0)
ptrace$poke(0x5, r2, &(0x7f0000000340), 0x5)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x400080, 0x0)
r3 = gettid()
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x105000, 0x0)
getsockname$tipc(r4, &(0x7f0000000100)=@name, &(0x7f0000000140)=0x10)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r3, 0x1000000000013)

13:24:00 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000)=0x700, 0x11)

13:24:00 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:24:00 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x3)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:00 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000)=0x8000a0, 0x11)

13:24:00 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000)=0x1000000, 0x11)

13:24:00 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:24:01 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:01 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x3)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:01 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:01 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000)=0x2000000, 0x11)

13:24:01 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:24:01 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)
clock_gettime(0x0, &(0x7f0000000040)={<r3=>0x0, <r4=>0x0})
clock_gettime(0x0, &(0x7f0000000100)={<r5=>0x0, <r6=>0x0})
write$sndseq(r0, &(0x7f0000000400)=[{0x7a2a, 0x8, 0xffffffffffffffff, 0x6, @time={r3, r4+30000000}, {0x97, 0x3}, {0x3, 0x3a}, @note={0x6, 0x8, 0x80000000, 0x0, 0xffffffffffff7e95}}, {0x8001, 0x1, 0xfffffffffffffff9, 0x66b1e4d5, @tick, {0x5, 0x6}, {0x8001, 0x69}, @raw8={"f7d7866ef5e625edd93a8126"}}, {0x7, 0xff, 0x1, 0xff, @time={r5, r6+10000000}, {0xffffffffffffffff, 0x7ff}, {0x5, 0xd51}, @note={0x10001, 0x7fff, 0xfffffffffffffc01, 0x7, 0x700d486e}}, {0xf6fe, 0x5, 0x1, 0xfffffffffffffffd, @tick=0xfffffffffffffff7, {0x1, 0x1}, {0x7f, 0x5}, @ext={0x65, &(0x7f0000000300)="37c695a5ea932a852b0dc0499363a1676da0b7fc7335b7a5cddcf44e64a7fd405ae42f202ae44e0342599a87a2e9a8915c21b2b96a5f12e31d230e05a2c3d2b4359804a3390aadc8da5a7ce27df8e60491104242bf6306c56cd33c5cf8960ab9f842824b8f"}}, {0x4ea0, 0x7, 0x4, 0x4, @time={0x0, 0x1c9c380}, {0x1, 0x7}, {0x3ff, 0x6}, @connect={{0x3, 0x9}, {0x1}}}], 0xf0)

13:24:01 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:01 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000)=0x7000000, 0x11)

13:24:01 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:01 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000)=0x8000000, 0x11)

13:24:01 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000)=0x10000000, 0x11)

13:24:01 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2791.281300][ T7497] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2791.291273][ T7497] FAT-fs (loop5): Filesystem has been set read-only
13:24:02 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:02 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:24:02 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:02 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000)=0xa0008000, 0x11)

13:24:02 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:02 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x8b)
connect$rds(r2, &(0x7f0000000100)={0x2, 0x4e22, @remote}, 0x10)
r3 = socket$l2tp(0x18, 0x1, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r4 = fcntl$getown(r2, 0x9)
tkill(r4, 0x24)
r5 = request_key(&(0x7f0000000140)='pkcs7_test\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000400)='/dev/snd/seq\x00', 0xfffffffffffffffd)
keyctl$describe(0x6, r5, &(0x7f0000000440)=""/109, 0x6d)
r6 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0)
bind(r3, &(0x7f0000000300)=@ax25={{0x3, @null, 0x2}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80)
tkill(r6, 0x1000000000013)

13:24:02 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000)=0xf5ffffff, 0x11)

13:24:02 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0)
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:24:02 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2791.948633][ T7497] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2791.958461][ T7497] FAT-fs (loop5): Filesystem has been set read-only
13:24:02 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000)=0xfeffffff, 0x11)

13:24:02 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:02 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000)=0xfffffff5, 0x11)

13:24:03 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:03 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2792.485826][ T7497] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2792.505324][ T7497] FAT-fs (loop5): Filesystem has been set read-only
13:24:03 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:03 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000)=0xfffffffe, 0x11)

13:24:03 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0)
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:24:03 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:03 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000400)={{0x0, 0x922c, 0x5, 0x6, 0x20, 0x9}, 0x2007fff, 0xfaad, 0x4, 0x6d6, 0x80000000, "c03c2f65942bd3ab2aee2b21804184d58c96f4d835918703fe6035f46b40e1dd45861fe948d7af982c6b41e0644c687504dc27787adee624e045409afc3c18d4d62f691b3330e3dd13f63fe49285b12283e33f53e48ccf38c5925692c6a0d71f2dbbca5c2e6df857463951181d8430eecbc610b4b3abf8ffefe50f783685e3fa"})
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r3 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x299, @initdev={0xfe, 0x88, [], 0x200, 0x0}, 0x80000000}, 0x1c)
tkill(r3, 0x1000000000013)

13:24:03 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000)=0x1000000000000, 0x11)

13:24:03 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:03 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000)=0x7ffffffffffff, 0x11)

13:24:03 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:03 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000)=0x8000a0ffffffff, 0x11)

[ 2793.304858][ T7497] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2793.313545][ T7497] FAT-fs (loop5): Filesystem has been set read-only
13:24:04 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:04 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:04 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:04 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000)=0x100000000000000, 0x11)

13:24:04 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0)
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:24:04 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:04 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000140)={<r1=>0x0}, &(0x7f0000000280)=0xc)
ptrace$setsig(0x4203, r1, 0x62, &(0x7f0000000300)={0x2f, 0x7, 0x4})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r3 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
pipe2(&(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x0)
timerfd_gettime(r4, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r3, 0x1000000000013)

13:24:04 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

13:24:04 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000)=0x200000000000000, 0x11)

13:24:04 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000)=0x700000000000000, 0x11)

13:24:04 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0)
fallocate(0xffffffffffffffff, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:24:04 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

[ 2794.161424][    C1] net_ratelimit: 23 callbacks suppressed
[ 2794.161433][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2794.172896][    C1] protocol 88fb is buggy, dev hsr_slave_1
13:24:05 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:05 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000)=0x800000000000000, 0x11)

[ 2794.481440][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2794.487308][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2794.493147][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2794.498919][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2794.504696][    C1] protocol 88fb is buggy, dev hsr_slave_1
13:24:05 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:05 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

13:24:05 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0)
fallocate(0xffffffffffffffff, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:24:05 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000)=0x1000000000000000, 0x11)

13:24:05 executing program 3:
syz_genetlink_get_family_id$net_dm(&(0x7f0000000300)='NET_DM\x00')
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
io_setup(0x9, &(0x7f0000000040)=<r3=>0x0)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x800, 0x0)
io_submit(r3, 0x1, &(0x7f0000000280)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x6, r1, &(0x7f0000000400)="db44256476b8bb2a43b4974a545781be818d1a2042b828b7ea085a97845a5e44c57a19c9a6a804ea43ba5de5411b4045cca803352f39cdcd2b2536d591c94a1aa65c1f66853dc6fd04b26021f26c410c277ef31ca38a3009613d078e9465b91aec656b1d82d8e230cea5999e06081b952cc2e98ef6e12e1400e127908e437890cd667a2e31", 0x85, 0xd2b5, 0x0, 0x1, r4}])
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000015)

13:24:05 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0)
fallocate(0xffffffffffffffff, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:24:05 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000)=0xf5ffffff00000000, 0x11)

13:24:05 executing program 4:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r0, 0xaeb7)
ioctl$KVM_RUN(r0, 0xae80, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

13:24:05 executing program 4:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r0, 0xaeb7)
ioctl$KVM_RUN(r0, 0xae80, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

[ 2794.881428][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2794.887299][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2794.893133][    C0] protocol 88fb is buggy, dev hsr_slave_0
13:24:05 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000)=0xfeffffff00000000, 0x11)

13:24:06 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:06 executing program 4:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r0, 0xaeb7)
ioctl$KVM_RUN(r0, 0xae80, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

13:24:06 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:06 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0)
fallocate(r1, 0x0, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:24:06 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000)=0xffffffff00000000, 0x11)

13:24:06 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r1, 0xaeb7)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

13:24:06 executing program 3:
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x200000, 0x0)
ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000280))
r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r1, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000380))
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r3 = gettid()
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r3, 0x1000000000013)

13:24:06 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r1, 0xaeb7)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

13:24:06 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0)
fallocate(r1, 0x0, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:24:06 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000)=0xffffffffa0008000, 0x11)

13:24:06 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r1, 0xaeb7)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

13:24:06 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0)
fallocate(r1, 0x0, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:24:06 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:06 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:07 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:07 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000)=0xffffffffffff0700, 0x11)

13:24:07 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0)
fallocate(r1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:24:07 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:07 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000100)={0x6, 0x2, 0x1}, 0xc)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x101041, 0x0)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000280)={0x5, [0x7c, 0x6, 0x7, 0x1, 0x8]}, &(0x7f0000000300)=0xe)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:07 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:07 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x7)

13:24:07 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0)
fallocate(r1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:24:07 executing program 4:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r1, 0xaeb7)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

13:24:07 executing program 4:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r1, 0xaeb7)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

13:24:07 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:07 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x7fffffffffffffff)

13:24:08 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:08 executing program 4:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r1, 0xaeb7)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

13:24:08 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0)
fallocate(r1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:24:08 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0x0)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:24:08 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x1, 0x0)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280), &(0x7f0000000300)=0x14)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000040), &(0x7f0000000100)=0x10)
r3 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
getpeername$inet6(r2, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000400)=0x1c)
tkill(r3, 0x1000000000013)

13:24:08 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:08 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0)
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:24:08 executing program 1:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x40, 0x0)
ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f00000000c0)={0xfffffffffffffff9, 0x5, 0x7, 0x0, 0x8, 0xfffffffffffffff9})
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r2 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r1, r2, &(0x7f0000000000), 0x11)

13:24:08 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:08 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000000c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0xfffffffffffffff8)
ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f00000001c0))
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00')
sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xac, r2, 0xc05, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x1c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x38, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3f9a}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc328}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xebd8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x81}, 0x4000)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[], 0x0)
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000080)=0x100)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:24:08 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:08 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2798.337993][ T7497] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2798.346613][ T7497] FAT-fs (loop5): Filesystem has been set read-only
13:24:09 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00000000000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:09 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000080)={0x1, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}}}, 0x88)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:24:09 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:09 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0)
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:24:09 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)=<r2=>0x0)
timer_create(0x6, &(0x7f0000000100)={0x0, 0xf, 0x2, @tid=r2}, &(0x7f0000000140))
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r3 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r3, 0x1000000000013)

13:24:09 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:09 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x4000, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
writev(r1, &(0x7f0000000400)=[{&(0x7f00000000c0)="128a9146725b649d1641d5f48a0101942b57e49926c2a9cea11b9c6bf1eb2ccee7b3eb031774ca2b321dadcc0848aa56d5c76fc393ccbf080360b2e3171c90617de69827c1", 0x45}, {&(0x7f0000000140)="cd9b4f163dedff9d70c178af1398db414aca42", 0x13}, {&(0x7f0000000180)="4f41a57002b78c936bcf7e996bd51e1fec11f58c5b14df2641dd58468df55f498902fdb769a2d416a96e021febb8ae7cf2ddd81fc32ba9ef1265dd", 0x3b}, {&(0x7f0000000300)="b804af73641bd1b85b462d194bbb20a3335938f7a64d0c3432bcfc9734377c11660b61ab638f4dc059ae6ec76ef3480e89ea27e9ee7cad85c4a5cab0ffe9b5e2478d658fb5d0c6e6b9d9864b8cfc89e383a5770d2e7477bfb785e2c83fc7be6c474312119594c95509b58bcc2dbb72d161832fac60b6ed5be1a08aafb2420496b1fc1b343bb3ac88", 0x88}, {&(0x7f00000003c0)="50b3b20422a81549df5bba72ae7532a33cdb31e5401d613137e2c09940da0d70039a75c1dab5b82fc46d783080fb4a63cf9cf68ed34d", 0x36}], 0x5)
sysfs$3(0x3)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000001000013ff0f0000000000000000000000000000"])

13:24:09 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:09 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f0000ed006fa8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:24:09 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:09 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:09 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f0000000300)='/dev/rfkill\x00', 0x4)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)

[ 2799.317632][ T7497] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2799.326216][ T7497] FAT-fs (loop5): Filesystem has been set read-only
13:24:10 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:10 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:10 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [], 0xa, "684c1c42192ede8ae2ef588c5fef8f8258a26836ccf81289616f244824b51515676b308d6a4673f6a8fd12d7342700b67ee3163391c4e96b661e78db6a6c6c245f0c79652555ada21471d9e984fa43779fff34bfe6293cb96383bfbd53336fbb645518ad762aac5d0809c0345c7cd34b89e580460e4e38bcb8d87d274a2317f208b1a7190f754fe1b03d0f624b79e48a7e85cf0f830b7e1c4ffe414ffebea2dc5fe8791072eb18d54ff70b22bde946928383af32a083"}, 0xc1)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(0xffffffffffffffff, r1, &(0x7f0000000000), 0x11)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xca5efafff0b5c8e, &(0x7f0000000080)=0x1, 0x4)

13:24:10 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0)
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:24:10 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r1, 0x1000008910, &(0x7f0000000040)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:10 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
fcntl$setflags(r1, 0x2, 0x1)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:24:10 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0)
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:24:10 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:10 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f0000000300)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\xb4\xe5\x0e\x04_$\xcaG\x89\xc0a*E\xce', 0x3)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:24:10 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:10 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:10 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="3f1c02ed1b0328f1983f47a62bc7157ef846a562d00f8d2714e4ed48430b505e0528cc496e8df2fe77a51c622da9ed8246e4982ed15435f743a45dc5c5e79f9e2921f741b0e136bcb903c0d468364553f1e567"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

[ 2800.401462][    C1] net_ratelimit: 23 callbacks suppressed
[ 2800.401471][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2800.412972][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2800.419677][ T7497] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2800.428297][ T7497] FAT-fs (loop5): Filesystem has been set read-only
13:24:11 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:11 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYRES32], 0x4)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:24:11 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:11 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0)
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

[ 2800.721451][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2800.727339][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2800.733230][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2800.739030][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2800.744848][    C1] protocol 88fb is buggy, dev hsr_slave_1
13:24:11 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000400)=""/234, &(0x7f0000000040)=0xea)
tkill(r2, 0x1000000000013)

13:24:11 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:11 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
vmsplice(r0, &(0x7f0000000700)=[{&(0x7f0000000080)="da9dd5d0f06ed87bbc", 0x9}, {&(0x7f00000000c0)="d3a32ca0839a164bb28b82556c014cfc5ef73c5aa043660e9abb15089d15f18332bece46a23fc8d3366236c32c59956eba91e6636ce7b36b40a3ae017861c33647f46c91f46fd2c04bd386313777fec756841dfb95d246c34d76a9810248edd03875ea1763766f4148e6e30ef64888bfa1d4790383e8c0597e9f86144c08c1e9924767d444bed95ceb4409838114b61bc660d6ee796058ab25432f42896943850e22f1d49f6288ef3945baeaa295b31082c94f97301dd9d9f851ac9926963faf40", 0xc1}, {&(0x7f0000000300)="5507753e3a5adec0c19ea85c4c3358c5c8ab944e9e3920197e1497059597f07fee5f80b6a2bf48d64f1b36d56ff3b7fcf9b590e8080342b95d38fdaca1715e0b", 0x40}, {&(0x7f0000000340)="4f3616c4851ed004cdaa589d6f18239a4a0a98b5bf0fcf850bb9b12bac1505987fbc10e6c166a51eb1b88f3ba2922b24491945b06f7fe431139504b5fd5674985a854f18fee3299fd299926d511c72f4a2cfcfdf044e87753f165542c0d7f4babfd4bf61c257513ff9f3f65f30a9e6fa1f73e96a265a85a7603357cb2d12b14d32223ffa85a74b6cf4bce360c936006f382043c7c75283fec10941fa5ed16e11d8c6d3f815508ec86850", 0xaa}, {&(0x7f0000000400)="35c9a7577fe7da7182a26e95ecebe9ff19de87e967c249a6fe04473048804010be4e4d1ba00a6a6ce7d683966b42351c6cf37339d5bfbec7a9fa54df48a0e74f84172cc92530b2474ef537980318e13a42dd4ebfb95c383afc0295c2728910fd344f31ebff184d803e2290d836e09df061fe8a0772128e68e7f01cf847238a23c19c1aed811f6958fb293ddd41b4d2714f630196c6e937824eb3aa3806340e8f9a2c4589c95dcbd492d7ea7276c632f0eb32", 0xb2}, {&(0x7f00000004c0)="52254c069a83d33753b0e3033e02547beac8fed848d472b8c23d016f72ba3181aaac9680f0f461f119bb3715c6", 0x2d}, {&(0x7f0000000500)="d14073e76a82b4e92875543908c0bb0ca674fe3e504b5446263c8f3017315e4e7055fa5d3e5e01dd3a6d1029a50bf03d63f6d0b90b61106965ee6ce8d9380589edd795aec0eed977af5484cf98aa395fa98deb819df24af74130af7cc49f987c05024831ec7f62023a7586b10d06650fdf1a54dd0206b96252af12571cb6461166f65fd03bb1d6ba6dc96604aa8d6b46ded80e1fe77edd0c8ea6659cf64c2841922c0c7d7ef5b18f38a379824253bdaccaf6b97431ffacd1f9b0cb27e04b099908a294ba4c604caa653f3dca447b7ca08de3eaa597", 0xd5}, {&(0x7f0000000600)="13354b13857dc83fe212341c8ba63c8562ffc6e89cbdbf6562ab2ea4f6fa8d01f364cf2d93bbd376311a2c7bb1048a66a61711acad20a2deeed0239c863c1b46567992c72eaa908becaac386b39061aa89e71384ebd7061eb032ac4b9d3752f83d6a17f623c47fd9a88a5156606b95673493011e350b5b4484737ee11bb5aabcd7788b853ed1cb7c2671e06f7f5ffb8bf1a0011d8e9c666c751a52d7fa54cfb8afedab4f5964864ce9519df74b98f2a54b52c9f0df061e085a0df563186cfa56fb7e88b552c52e76b04ac0", 0xcb}], 0x8, 0x0)
clock_gettime(0x0, &(0x7f0000000780)={<r2=>0x0, <r3=>0x0})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000007c0)={0x400, 0x2, 0x1, {r2, r3+30000000}, 0x7, 0x3})
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f699fb91002a8"], 0x7)
getsockname$packet(r0, &(0x7f0000000840)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000880)=0x14)
ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000008c0)={r4, 0x4, 0x2, 0x1, 0x3ff, 0x7, 0x80000000})
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:24:11 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0)
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:24:11 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:11 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0)
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:24:11 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x101008, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f18023ac7faa8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:24:11 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2801.121448][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2801.127250][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2801.133064][    C0] protocol 88fb is buggy, dev hsr_slave_0
13:24:12 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:12 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)
getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

13:24:12 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:12 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0)
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

[ 2801.672806][ T7497] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2801.689279][ T7497] FAT-fs (loop5): Filesystem has been set read-only
13:24:12 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x928a, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000100)="b27f7253d4c98ab96e9d87cdd06c318ae8f4a74dcf09d4203dea5180beda123e62eae7efc9697a07f59af8da60054aa605c651cb8a472a0c7593667f0de3a58d2cc61edbd1c05ec40a6608142b90fd269f6f02387d172750fcdfab2dd47a3276939a210768477d5347fcf9fe5cf5a16868d9de716f77d7cb92", 0x79)

13:24:12 executing program 1:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x14b100, 0x0)
r1 = syz_open_dev$vivid(&(0x7f00000000c0)='/dev/video#\x00', 0x3, 0x2)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x50, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="11634840000000000000000002000000000000000000000011000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0900000000c888f36f743cb63915d92366000000", @ANYRES32=r1, @ANYBLOB="0000000077f80300000000000000d27967cd5210b6745f1422423d20851656ec1066734d92991d6005aaa5aa3be0a70a78a73eb56a157ec40c7952952b47437dc4be27d7b9e349de26a42de1d0887634bf142f28b1beb7b0cfdbdce199d6583d8baf2c19b60e2eac"], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00ffffffffffffff0b630000"], 0x6d, 0x0, &(0x7f0000000380)="fb2d098c147c6a1ccea18d95c7cf8107dac8781aeb142704890803b5bf3609d5892fd8588ea535f19f8c947e38c48a5f426fb54071956ffdb200f6b96ed777e39468f9a01cc4c717c45beb414e15b9f5e5543c05460c2ab42054870f46a6b59c165302efad11e378056c6d4484"})
syz_open_dev$usb(&(0x7f0000000400)='/dev/bus/usb/00#/00#\x00', 0x2, 0x800)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r3 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="3fcf8d03a80a25"], 0x7)
getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000100)=0x7, &(0x7f0000000480)=0x2)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3)
sendfile(r2, r3, &(0x7f0000000000), 0x11)
ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead)

13:24:12 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:12 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:12 executing program 1:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0)
sendto$llc(r0, &(0x7f00000000c0)="263402c58505a19e6a7c922ccbae0dfa79312ae304ee0a8ec1f3a71cb0758356114f257570436e35d62befe5482d389a97c741782cae92dfa651939e3a77720b8ed2de4b925fa51cdad860903cb2897ab515b93602ce13b5ea8ad0d99bf42d8cfc4347f34a1462db25b89c29ae4ec6668e5b03a9897dd65c2f719ce6a3955c123390b1af0cdb4735a80acee0e7d4ca4a86d09ef870f916c71e64f441e99e6b60a35f35d591bace5681496112d07cc4a8dc3c07a3bfb54d0397e2009e30e1e0df4fa58ba4fc3508e71d2aed29440c4837440821e3c36f8bb8befea384b13c07215a6bdf9b18679d68cd38d10589e861b1ca2a86b4490b64ed3fcfb1c9", 0xfc, 0x20000080, &(0x7f0000000300)={0x1a, 0x1, 0xfffffffffffffffa, 0x5de, 0x3, 0x8, @dev={[], 0x26}}, 0x10)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed004859fbfe9f1cc7c47b23a8c1"], 0x7)
sendfile(r1, r1, &(0x7f0000000000), 0x8)

13:24:12 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:12 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0)
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:24:13 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="3f1802ed0003a8979ecbc8cacfae1c570a18fcf7b484faef7b3dd3a2f8e3099e165289379b152f1abc0beb59d3485c44391d315875621bbcec45f1d55fae58a2bd6db4beff1ba5dbb408200b9abbad1b5dd8e39d93fe1dee5a5bb6affa3e434dcf97de75b8d54f86b6da8200867b37d12262f25c19ed3307518f6479b90b03ce0e74e3"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

[ 2802.240445][ T7497] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2802.260985][ T7497] FAT-fs (loop5): Filesystem has been set read-only
13:24:13 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:13 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:13 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f18eaec0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:24:13 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
syz_mount_image$nfs(&(0x7f0000000140)='nfs\x00', &(0x7f0000000180)='./file0\x00', 0x9, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="c3319da28397a4e6a6fadf231efa5a72188e0d9f663d7db661c9d8bf6f8766c2dd75173679bf2218d3cac4ced6f73a72f21fa0945b28e6998c93039038955f7c2bd0", 0x42, 0x2}], 0x1048040, &(0x7f00000003c0)='trustedvmnet0proc}]\x00')
utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{0x0, 0x7530}, {0x77359400}})
getsockname$netlink(r0, &(0x7f0000000400), &(0x7f0000000440)=0xc)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0)

[ 2802.793959][ T7497] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2802.811836][ T7497] FAT-fs (loop5): Filesystem has been set read-only
13:24:13 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x2, 0x20000)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00')
sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000400)={0x200, r2, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200000000000000}]}, @TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100000000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x94}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER={0x10c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x2, @ipv4={[], [], @loopback}, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x83da, @rand_addr="ab52208497aa52df40091982a113725b", 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x101, @mcast2, 0x6}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5ea6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5c8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x81}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x218e92bf}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x41}, 0x4005)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x2c39, 0x800)
bind$nfc_llcp(r3, &(0x7f0000000100)={0x27, 0x1, 0x0, 0x7, 0x3, 0x1, "d47e47f1939fbbffbf126e7c2a42fa8c8f135ca296acb9f34b1ec534404fc0781d3f2876c35256a5d7a75e89b912f578d31a76d17375c34807f38402ea8fd1", 0x16}, 0x60)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r4, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r5 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r5, 0x1000000000013)

13:24:13 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:13 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0)
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:24:13 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
connect$bt_rfcomm(r0, &(0x7f0000000080)={0x1f, {0x400, 0xeca8, 0x6, 0x3, 0xff3, 0x2}, 0xffffffffffffb0bd}, 0xa)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e23, @multicast2}], 0x20)

13:24:13 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:13 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="1e0c0145c364de96d9ae80794e0e412295dab5441fdba78e6efd20cc19b43d805837d6cdefe6a7f7de2795e8793ae8b1afaeb325ef9e57452a4c528c961e5781387cc52586a1295a4195486b5837e6457866390d31f6ab0833764fbcebb2397039b1ed7726807b23b98fd3e1f0bfb87793dd296eba017ab641b63a7fffcd93eb9c32edecec83d6af4baaa77cc7d96405535f", 0x92)
write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="3f1802ed00a22650b81e59a2b8041e89af1c2e24ce72"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:24:13 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0)
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:24:13 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

[ 2803.525935][ T7497] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2803.534680][ T7497] FAT-fs (loop5): Filesystem has been set read-only
13:24:14 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:14 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f0000000300)='em1bdev^cgroup\xce[\xd3d\t\x18\x02Y\xbeQ\x05\xc0\b\xedV\\s\xe6y\xfb\xb9A\x1a)a\xc5\xe7\xf3Z\t\xe9:5sum*system\xdf\xb6/*!e\xc8\xed\xbe\x865\xc2-5?c\xe1\x1f\xd1\x1a\xc7\xc0\xb8\x04\xd7,\xe9\xc3\x1f\xc1\x9f\x14\xd0\x92\xbd\x18\x0e\x9c\x1b\xa5\tL\x8dJ\xc0\a\x8f\xde\xf6', 0x3)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000080), 0x11)

13:24:14 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

13:24:14 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0)
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:24:14 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001600)={0xffffffffffffff9c, &(0x7f0000001500)="502751114a5e266008f3f526ad2a7315b7d9c281020ceeded5c56d5fd018ab8f6f74ada5e487023ee990c411a823378a621dd89cbe02fdb8b478648843fe0ea97ab76b3ab2aeb814e82970ec5706f270846baeeaa14001d0170b3426bcaf1b7d2ab208d25a8a555e39f2ebd47d003ec1e3e3c87e710c45f1471155c1fc6c5630e4274152aa5628de99a972eec75e5e4e2e3c0ed1ca1cfce6df0fbcf569cd9ebf70781eb372d72ad696211e2bfaa83dc16c047749d830eb0404d6367d6d4315447470f4cbdf272251bc2359f045b9f8e9fe"}, 0x10)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
r3 = syz_open_dev$sndpcmp(&(0x7f0000001640)='/dev/snd/pcmC#D#p\x00', 0x0, 0x408000)
recvfrom$rose(r3, &(0x7f0000001680)=""/50, 0x32, 0x10000, &(0x7f00000016c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @bcast]}, 0x40)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000001400)={<r5=>0x0, @in={{0x2, 0x4e21, @broadcast}}}, &(0x7f0000000280)=0x84)
ioctl$SIOCX25SENDCALLACCPT(r4, 0x89e9)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000300)=ANY=[@ANYRES32=r5, @ANYBLOB="3a0000006552e694fcfc8da981000000be2e5053bcb6ce37958766a0fc43c2aeeb45763deaba088ff3ae2dcc074b4247229a20b44c66a27d3f87fe09c5bf"], &(0x7f00000014c0)=0x42)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000100)="6f2d0fc17fdbfb93c70cbd", &(0x7f0000000400)="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", 0x1}, 0x20)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:14 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)
ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000080)=""/197)

13:24:14 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

13:24:14 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00000000000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:14 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:24:14 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0)
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:24:14 executing program 4:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)
ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000080)=""/197)

13:24:14 executing program 4:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0)
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

[ 2804.125896][ T7497] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2804.147581][T17553] QAT: Invalid ioctl
[ 2804.152730][ T7497] FAT-fs (loop5): Filesystem has been set read-only
[ 2804.318636][T17592] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006241)
[ 2804.331529][T17592] FAT-fs (loop5): Filesystem has been set read-only
[ 2804.338789][T17592] FAT-fs (loop5): error, invalid access to FAT (entry 0x00007500)
[ 2804.380624][ T7497] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006241)
[ 2804.537576][ T7495] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2804.546482][ T7495] FAT-fs (loop4): Filesystem has been set read-only
13:24:15 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:15 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000004e810262b03ca91d718ffb58fba2436e21f783a80ea9c259d824dd18bd0d335884852b05c50251b5056583f612e1c22585d960e572527d33ef64fb154712fe0925b656762b49cfd2353735f2056f0ac6f578139922a0facaeb40e9eedb7d71d37e273cfeccc3b99b81ff03518d6c4446b3b109192eee7071e0b8c03ad7e919308dae4e8903ce4a13ed5add787dfc05ac9b12972c502ea573c16249dba300461772d49fe6ca9395ccec352266f24ac7833dbf3b7b2c13368df9515de8b9d83b7343866c1630000000000000000000"], 0x7)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r0, &(0x7f0000000300)="aaf9b62f33d1", &(0x7f0000000340)=""/65}, 0x18)
r2 = accept4$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, &(0x7f00000002c0)=0x100000107, 0x80800)
sync_file_range(r2, 0x7f, 0x5, 0x0)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:24:15 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0)
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:24:15 executing program 4:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0)
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

[ 2804.898476][T17553] QAT: Invalid ioctl
13:24:15 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
accept$inet(r1, &(0x7f0000000100)={0x2, 0x0, @loopback}, &(0x7f0000000140)=0x10)
read(r0, &(0x7f0000000200)=""/28, 0x4)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r2 = syz_open_dev$dspn(&(0x7f0000000280)='/dev/dsp#\x00', 0x100, 0x8001)
r3 = getpid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000400)={{0x3, 0x1, 0x6099, 0x4, 'syz1\x00', 0x4}, 0x0, 0x8, 0x200, r3, 0x6, 0x3ff, 'syz0\x00', &(0x7f0000000300)=['/dev/snd/seq\x00', '/dev/snd/seq\x00', '/dev/snd/seq\x00', '/dev/snd/seq\x00', '\xcd,[/selinux\x00', 'wlan1trustedeth1(selinuxwlan1\xe1md5sumposix_acl_access,(}em0\x00'], 0x7b, [], [0x2, 0x8001, 0x200, 0x1]})
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r4, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r5 = gettid()
sched_rr_get_interval(r5, &(0x7f0000000040))
r6 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r6, 0x1000000000013)

13:24:15 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0x0)
syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x49, 0x880)
sendfile(r0, r1, &(0x7f0000000000), 0x11)
ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000100)={0x0, 0x4, 0x7, [], &(0x7f00000000c0)=0x5})

13:24:15 executing program 4:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0)
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:24:15 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:15 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="3f89a41268d09470f197492b79d7c7a9f6a9df4a25fe46a3bc72578366ac64e5888731201605106fb47fe1cb663413dfd477a58c46df2a6836910f82fce129d108d1f4488bf7d708197edee187301acf1e802177b17d5385f2d31d26cfc1ff55dfc402a3f65803000000163ddb27"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x20000007027)
ioctl$RTC_AIE_ON(r0, 0x7001)

13:24:15 executing program 4:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0)
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:24:15 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0)
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:24:15 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x4)
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

[ 2805.150586][ T7497] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2805.169472][ T7497] FAT-fs (loop5): Filesystem has been set read-only
13:24:16 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:16 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000080)=""/79)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x1, 0x4, 0x8, 0x100000001}, {0x5, 0x2, 0x8, 0x20}, {0x81, 0x4, 0xff, 0xfffffffeffffffff}]}, 0x10)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:24:16 executing program 4:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0)
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:24:16 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0)
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

[ 2805.946139][ T7495] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2805.954974][ T7495] FAT-fs (loop4): Filesystem has been set read-only
[ 2806.641420][    C1] net_ratelimit: 23 callbacks suppressed
[ 2806.641428][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2806.652997][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2806.971434][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2806.977243][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2806.983172][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2806.988929][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2806.994711][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2807.361478][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2807.367296][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2807.373149][    C0] protocol 88fb is buggy, dev hsr_slave_0
13:24:18 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, <r1=>0x0})
capget(&(0x7f0000000100)={0x39980732, r1}, &(0x7f0000000140)={0x8, 0x0, 0x101, 0x4, 0xfff, 0x3f})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x214, @tick, 0x0, {}, 0x0, 0x1})
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r3 = gettid()
r4 = shmget(0x0, 0x2000, 0x118, &(0x7f0000ffb000/0x2000)=nil)
shmctl$SHM_INFO(r4, 0xe, &(0x7f0000000400)=""/4096)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r3, 0x1000000000013)

13:24:18 executing program 1:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x4000, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={<r1=>0x0, 0x7, 0x3}, &(0x7f0000000100)=0x8)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000300)={<r2=>r1, 0xe9, "7024619d949bd556693ff15bedee2ab7e215825a4db731fa050554dacfe2f9b2497e6960745f25d6b46c06e0b74706b7d53f402b62d41a1536f2f6179747e61bbec0524836b4491d6302c2de7184cc2b460c689ac4e04fdb7bf556043e5b5d30df054930792bbac94d655706db716a463dd48c6e5f0fe49900bf4978a7a384e6e67105a225a2d129dee6933d05510517456ca424b41ff69e4d6aef4bce755c32ceeac2e1fd92286778463aab2f26e49f2bf3d7e0418b821abd86cc01c3ead23bf437b53d74273f612978ab6e1867676464214b3e7eb4a64940f6b3ab7989f6d50e2102c7f2f901d120"}, &(0x7f0000000140)=0xf1)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000400)={r2, 0x3}, &(0x7f0000000440)=0x8)
r4 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\t'], 0x7)
sendfile(r3, r4, &(0x7f0000000000), 0x11)

13:24:18 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0)
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:24:18 executing program 4:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0)
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:24:18 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:18 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:18 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x2180, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)
ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000040))

13:24:19 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:24:19 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="3f1802ed0003a8a691ef3f62012b594a348bbd96f00500ecd3e8241e5bbc892f2e65bb7870c7cb2d9557030c40c7a27a827b2c81dcebf6fa0a192e8248cb9b5526a86fe49219d8f8dd50d53615014b5f0e19f00fcf7255444e5af2b1e6b52570a7766bb2d96b08e91d59f891bfb965c4c4e42acafbcfc0ced02ed0d06e5c5ee802c3f09b5ee9f286559db581d3a8e81786992bb74f133800000000000000000000"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:24:19 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000080)={0x3f, "a836b42a810f8cd003cbfe34e45b37eda2db17dfea7ccf12142c72f471b83a19", 0x3, 0x80, 0xb62, 0x8001, 0x4, 0x1, 0x3, 0x1})
r1 = memfd_create(&(0x7f0000000300)=')\\\x10X\x80\xa9\x1f\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\xfa\xdct\xb87\xb7\t\xf4p #U\xf9I\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t\x0f\x8e\xa9\'\x9a\xd6[\x95I\xed\xb8\xc0a8\x11\xa8\x12\x03Q\xa9\xa7\x96_~ni]\x87*\xff\xb4sPBn\xd9\x1c\xcb`\xe9$u}\xd4\xe0\xbc\x9b\x81\x8fl\xc0T\xe0\x9d\xba\xcc\xd5\xe1\v\x18(Y\xdbm\xa8\xc2v\x8a\x7f!\xe8\xf8\xc4v\xa8\x96\xe4\xa3\xa9(eI\xbe\x90\xa3DdW\xb2\x90\b\x0f', 0x3)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:24:19 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0xfffffffffffffffd)
setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080)=0x20, 0x4)
write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYRESHEX=r0], 0x12)
ioctl$RTC_UIE_OFF(r0, 0x7004)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:24:19 executing program 4:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0)
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

[ 2808.686154][ T7495] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2808.695384][ T7495] FAT-fs (loop4): Filesystem has been set read-only
[ 2808.708591][ T7497] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2808.717507][ T7497] FAT-fs (loop5): Filesystem has been set read-only
13:24:19 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r1, 0x0, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$EVIOCSABS20(r3, 0x401845e0, &(0x7f0000000100)={0x6, 0x7, 0x8, 0x4, 0x6, 0x2})
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:19 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0)
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:24:19 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000000c0)=')\xf9\x13X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y\xb2\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x5)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x7)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080))
sendfile(r0, r1, &(0x7f0000000000), 0x11)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x8000, 0x0)

13:24:19 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:19 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:19 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000080), 0xe)

13:24:20 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000080), 0x11)

13:24:20 executing program 4:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0)
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:24:20 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1816ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:24:20 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0)
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

[ 2809.412716][ T7495] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2809.451524][ T7495] FAT-fs (loop4): Filesystem has been set read-only
13:24:20 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000300)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0xffffffffffdffffc)
linkat(r0, &(0x7f0000000080)='./file0\x00', r0, &(0x7f00000000c0)='./file0\x00', 0x1000)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x20400, 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[], 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfffffffffffffffd, 0x11)

[ 2809.466790][ T7497] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2809.475385][ T7497] FAT-fs (loop5): Filesystem has been set read-only
13:24:20 executing program 4:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0)
fallocate(0xffffffffffffffff, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:24:20 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x181, 0x0)
ioctl$BLKBSZGET(r3, 0x80081270, &(0x7f0000000140))
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f0000000240))
timer_settime(0x0, 0x80000000, &(0x7f0000000300)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)
ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f0000000040)={0x1000, 0x10000})

13:24:20 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000080)=""/74, 0x4a}, {&(0x7f0000000300)=""/246, 0xf6}], 0x2)

13:24:20 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0)
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:24:20 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:20 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:20 executing program 4:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0)
fallocate(0xffffffffffffffff, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:24:20 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="081802ed9a19559cdac9cddaffc0be9c549f0ca7ce17e6038b527644a56ca07617ed2c9edb91b39fdf3949a15b002bde93c8267371f01060e8d8ad1945e288b9a2414fa8de04ce93bf2624392467a63ceac42edd21e46333f9b4066027d7a5eec26822e64137"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

[ 2810.054083][T20428] QAT: Invalid ioctl
[ 2810.058390][T20428] QAT: Invalid ioctl
13:24:20 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x10)
r1 = accept(r0, &(0x7f00000000c0)=@sco, &(0x7f0000000140)=0x80)
getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000300), &(0x7f0000000340)=0x4)
r2 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0)='fou\x00')
sendmsg$FOU_CMD_ADD(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, r2, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e24}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x2f}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0xbb}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x5e}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x33}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x2b}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}]}, 0x64}, 0x1, 0x0, 0x0, 0x8800}, 0x20000000)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="140000002e008183ad5de0713c444d000e000000", 0x14}], 0x1}, 0x0)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r4 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e.\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"\x86H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r3, r4, &(0x7f0000000000), 0x11)

13:24:21 executing program 4:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000080)=""/74, 0x4a}, {&(0x7f0000000300)=""/246, 0xf6}], 0x2)

13:24:21 executing program 4:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0)
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:24:21 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="537320c735d1e5c7ca46180203a8"], 0x7)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x1)
sendfile(r0, r1, &(0x7f0000000000), 0x11)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f0000000080)="d6205b61c70720ac2d836d40a1b932e61670bed8f90b66253745101e4ffc24b1f4918cc5a14ae0086dd227879076cabaf6c191039558af2002b0a666fadd63bfc06ccac0a58adbd288ec5375584b8dd13dcf1ea6e74c2f4efc755cb86be1196ab2760c225b616813407a2783931039b10023deeb89cdfce16779b85db36182482b91ece13f1c533204febbe51a1a86b83a215a"}, 0x10)
setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000180)=0x6, 0x2)
ioctl$BLKFRASET(r0, 0x1264, &(0x7f00000002c0)=0x3b01029c)

13:24:21 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0)
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

[ 2810.406144][ T7497] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2810.420881][ T7497] FAT-fs (loop5): Filesystem has been set read-only
[ 2810.808076][T20867] QAT: Invalid ioctl
[ 2810.812367][T20867] QAT: Invalid ioctl
13:24:21 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:udev_helper_exec_t:s0\x00', 0x28, 0x3)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380)={{0x0, 0x20000000}})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:21 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000000c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
r2 = socket(0x40000000015, 0x5, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r3=>0x0}, &(0x7f0000000200)=0x5)
setreuid(0x0, r3)
kexec_load(0x0, 0x0, &(0x7f0000000740), 0x0)
sendfile(r1, r1, &(0x7f0000000000)=0xfffffffffffffffe, 0x9)
getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000200), &(0x7f00000001c0)=0x4)

13:24:21 executing program 4:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0)
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

[ 2810.851752][ T7495] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2810.860492][ T7495] FAT-fs (loop4): Filesystem has been set read-only
[ 2810.899894][ T7497] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2810.908937][ T7497] FAT-fs (loop5): Filesystem has been set read-only
13:24:21 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:21 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:21 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0)
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:24:21 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
rt_sigsuspend(&(0x7f00000000c0)={0x200}, 0x8)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000300)={0x0, 0x0, 0x6, 0x0, [], [{0x8, 0x1, 0x1ff, 0x8, 0xd99, 0x6}, {0x80000000, 0x7fff, 0x1, 0x200000000000000, 0x7f, 0x1}], [[], [], [], [], [], []]})
r1 = memfd_create(&(0x7f0000000080)='bdeveth1\\\x00', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getgroups(0xa, &(0x7f0000000100)=[0xffffffffffffffff, 0x0, 0xee01, 0x0, <r2=>0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0x0, 0xee00, 0xffffffffffffffff])
r3 = getegid()
setregid(r2, r3)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:24:21 executing program 4:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0)
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:24:21 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0)
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:24:22 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
ioctl$TIOCGETD(r0, 0x5424, &(0x7f00000000c0))
poll(&(0x7f0000000100)=[{r0, 0x401}, {r0}, {r0, 0x400}, {r0, 0xa0}, {r0, 0x408}, {r0}], 0x6, 0x3)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="3f1802ed0003a84379d572df9364c498485f0240626d3d0d9ecfeda732"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:24:22 executing program 4:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:24:22 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x100000101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x7)
socket$inet6(0xa, 0x4, 0x1)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

[ 2811.691071][ T7497] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2811.699885][ T7497] FAT-fs (loop5): Filesystem has been set read-only
13:24:22 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x4000, 0x0)
getsockname$inet(r1, &(0x7f0000000280)={0x2, 0x0, @initdev}, &(0x7f0000000300)=0x10)
read(r0, &(0x7f0000000100)=""/28, 0xfffffedd)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x400000, 0x0)
ioctl$KVM_GET_LAPIC(r3, 0x8400ae8e, &(0x7f0000000400)={"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"})
connect$rds(r3, &(0x7f0000000340)={0x2, 0x4e28, @rand_addr=0x34dd}, 0xe64adde427aa87fe)
r4 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r4, 0x1000000000013)

13:24:22 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000080))
ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:24:22 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0)
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

[ 2811.852517][ T7495] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2811.861153][ T7495] FAT-fs (loop4): Filesystem has been set read-only
13:24:22 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:22 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:22 executing program 4:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:24:22 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1882ed000303"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x7, 0xfff})

13:24:23 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14)

13:24:23 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000100)='ip6gretap0\x00')
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="3f2202ed0003a8824ea3bb52f983089e8bbbffd9479544de758bfa0992a748b9eb4e6c84132c00000000000000000100000000"], 0x7)
pread64(r1, &(0x7f0000000080)=""/87, 0x57, 0x0)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000300)={<r2=>0x0, 0x250, 0x30, 0x10000, 0xff}, &(0x7f0000000340)=0x18)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000380)=@assoc_value={r2}, 0x8)
sendfile(r0, r0, &(0x7f0000000000), 0x11)
r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x41, 0x0)
setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, &(0x7f0000000180)=0x1f, 0x4)

13:24:23 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0)
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:24:23 executing program 4:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

[ 2812.493574][ T7497] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2812.502845][ T7497] FAT-fs (loop5): Filesystem has been set read-only
13:24:23 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x200200, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f180245cb185c"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

[ 2812.546637][ T7495] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2812.574521][ T7495] FAT-fs (loop4): Filesystem has been set read-only
13:24:23 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x16, 0xfffffffffffffffd}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@initdev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@mcast1}, 0x0, @in6=@initdev}}, &(0x7f0000000040)=0xe8)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, <r4=>0x0}, &(0x7f0000000280)=0xc)
fchown(r1, r3, r4)
tkill(r2, 0x1000000000013)
r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x109002, 0x0)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x9000800}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r6, 0x701, 0x70bd29, 0x25dfdbff, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x9190, 0x200000000000000, 0x7f, 0x6}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x40000)

13:24:23 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$llc(r0, &(0x7f0000000080)={0x1a, 0x335, 0x1, 0x2, 0x2, 0x0, @random="2061a62f9e03"}, 0x10)

13:24:23 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0)
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

[ 2812.881444][    C1] net_ratelimit: 23 callbacks suppressed
[ 2812.881451][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2812.893052][    C1] protocol 88fb is buggy, dev hsr_slave_1
13:24:23 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:23 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:23 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
ioctl$KVM_DEASSIGN_DEV_IRQ(r0, 0x4040ae75, &(0x7f00000000c0)={0xfffffffffffffffb, 0x0, 0x2, 0x200})
sendfile(r0, r1, &(0x7f0000000000), 0x11)
syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2)

13:24:23 executing program 4:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:24:24 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580)='/dev/zero\x00', 0x40, 0x0)
getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000005c0), &(0x7f0000000600)=0x4)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r2 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="3f1802ed0003a8a4ffffffff5049ec"], 0x7)
sendfile(r1, r2, &(0x7f0000000000), 0x11)

[ 2813.201427][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2813.207368][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2813.213314][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2813.219176][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2813.225060][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2813.241490][ T7495] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2813.266300][ T7495] FAT-fs (loop4): Filesystem has been set read-only
13:24:24 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
recvfrom$unix(r0, &(0x7f0000000080)=""/160, 0xa0, 0x2, 0x0, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:24:24 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0)
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:24:24 executing program 4:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:24:24 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)
write$FUSE_OPEN(r1, &(0x7f0000000080)={0x20, 0x0, 0x2, {0x0, 0x2}}, 0x20)

[ 2813.404388][ T7497] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2813.426675][ T7497] FAT-fs (loop5): Filesystem has been set read-only
[ 2813.601436][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2813.607392][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2813.613239][    C0] protocol 88fb is buggy, dev hsr_slave_0
13:24:26 executing program 4:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1}, {0x7fff}, 0x5, 0x2, 0x6})
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:24:26 executing program 1:
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x101006, 0x0)
r0 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r0, &(0x7f0000000000), 0x11)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0)

13:24:26 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0)
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:24:26 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount(&(0x7f0000001d00)=@sg0='udev/sg0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)='ubifs\x00\xbaD\xd8\\$\xa7]#^O9\x91\xcf\xdf\x98\xc2\xa8\x10\x06\xc6\x00\x80\x00\x00\x00\x00\x00\x00g/\x17;#\x86\x8c\xf3\xd8\xff\x9eP\xbd\'\xfc$\x98J\x1ey$Fg\xc8\x0fq,-Q+\x16\x11\xf6\xaf\xb3z\xd2\xda\v\x8e\xc7\x0e\x85\x83\xc9\x8c\x05\x19g/\x8f\x01\xbe\xd4\x85\xbdH\x1eJ2\xf2\xb2\xf4j/.A\xa3gWY\x96\xed\xe5\a;0VO\x00\x82>\xcfpdB[\x83\x9d3\xd8\x82\a\x91\xed\xb6]\x15\xbbeM<\x11\f\x1f\xee\xff\x01\x93\xd5\x10\xa7p\xf0dI`Yphz\xe3g\\\xff\xcb\x17\x80]\xa9\xc2\xbc$\xd0\x17q\xb9\x04H\xf5\x9e\x99\x91\xdcj\xcd\x80\xd6\xadIw\xb2\xcd(\xa0T\xea\x90&\xdc\xff\x9e\x17\x12\xf8w\x87E\xb5\v\xccjI\xc9\x02K\xe3\xc9\x7f\x89z\xc9\xe8\xdc\'\x19_/f\x801w\xca\xa1\xd6?\x0f\x17\xa5G\xce]\x89S\xcd\xa5\x8c\x05o\x85\fP\xb8b)\x06\x19\xbb\nj\x15\xb9;\xfb\x83\xb9\xf3\"RC\xbc\x85pM\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x8072\x99\x9f4\x9eB\x02\xd0da\x98\xacO\xeb\xd8h\xdb_\xa6\xb4\xe0H\xb3\xe3\xb4\xebh\xf9L\x94\xf2\xb8', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:26 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:26 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:26 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0)
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

13:24:26 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x10000, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="3f1802d618d51a40"], 0x7)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={<r2=>0xffffffffffffffff, r0, 0x0, 0xc6, &(0x7f00000002c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0xffffffffffffffff}, 0x30)
r3 = getpgid(0xffffffffffffffff)
clock_getres(0x2, &(0x7f0000000180))
r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x4, 0x2000)
kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r0, &(0x7f0000000100)={r4, r1})
sendfile(r0, r1, &(0x7f0000000000), 0x11)

[ 2816.092701][T23357] UBIFS error (pid: 23357): cannot open "udev/sg0", error -22
13:24:26 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802e90003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)
pread64(r1, &(0x7f0000000080)=""/231, 0xe7, 0x0)

13:24:27 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000)=0x10000000000000, 0x11)

13:24:27 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802000803a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)
ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000040)={0x1, 0x5})

13:24:27 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90\xb5D\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:24:27 executing program 4 (fault-call:8 fault-nth:0):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:27 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0)
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)

[ 2816.617057][ T7495] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2816.626399][ T7495] FAT-fs (loop4): Filesystem has been set read-only
13:24:27 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="11f502ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

[ 2816.670384][ T7497] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2816.688049][ T7497] FAT-fs (loop5): Filesystem has been set read-only
[ 2816.839863][T23398] UBIFS error (pid: 23398): cannot open "udev/sg0", error -22
13:24:27 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:27 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f1802ed0003a8"], 0x7)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000300)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@loopback}}, &(0x7f0000000100)=0xe8)
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
r4 = geteuid()
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x40, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x6}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x800}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}], [{@hash='hash'}, {@uid_gt={'uid>', r4}}, {@subj_type={'subj_type', 0x3d, 'eth0ppp1.)=,)*'}}, {@measure='measure'}, {@dont_appraise='dont_appraise'}, {@smackfsroot={'smackfsroot', 0x3d, '['}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@seclabel='seclabel'}]}})
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:24:27 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:27 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x9fb, 0x260000)
r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:27 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:27 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffffffffffff1a)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:24:27 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0x2, 0x0)

13:24:28 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000080), 0x11)

13:24:28 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0x5421, 0x0)

13:24:28 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x4)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:24:28 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0)
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(0x0, 0x0)

13:24:28 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f0000001380)=ANY=[@ANYBLOB="3f1802ed0003a837d80b20959990e6b0404c31eeb5906a09157b09c4e2c4f080cfb7ccb5bb8ddd2a347fa2f238eaac412be1b6b627bd2211e0ca03d368b50fd7247fcaeb132ee6dcc223078cf17bee86c992af7727c051828fdc2b22b0fef701e10a5b"], 0x7)
r2 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000300)="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", 0x1000, 0xffffffffffffffff)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, <r3=>0x0}, &(0x7f0000000140)=0xc)
lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
keyctl$chown(0x4, r2, r3, r4)
sendfile(r0, r1, &(0x7f0000000000), 0x11)
setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f00000002c0)=@netrom={'nr', 0x0}, 0x10)

[ 2817.584412][ T7497] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2817.593867][ T7497] FAT-fs (loop5): Filesystem has been set read-only
13:24:28 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:28 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0x5450, 0x0)

13:24:28 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1802ef0003a856c6f71f52700a8977dcecef7ef46a698eb4b06167e41db51189f9b116695f91d3a5838abcba772a7432212ec4099557c8ed6479d5459f76b3296979250bc959a93bd057bb27b91e1b43e916aee3f92ee9cb2d3363a69de300a61e1b6dc5a4aa0252f41fdba4deef762608d3dc11e9910c3ddd67fb1c958417e4e12983ec81db9e790dc5d0088fc14f4ea7607f3978b9581eadaa92a5bc4048a55bb8c319ce14fb69f1acfe68cc6254edccb0d1ac5f17ef143597f4dbc6429b03f21a7f2c843e8be630afabd7dd8612edeecdc3d350f4a45e02c6d3"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

[ 2817.897068][ T7497] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2817.910065][ T7497] FAT-fs (loop5): Filesystem has been set read-only
13:24:28 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
ptrace$setsig(0x4203, r2, 0x9ed6, &(0x7f0000000100)={0x6, 0x1, 0xfc})
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x8082, 0x0)
ioctl$BLKPBSZGET(r3, 0x127b, &(0x7f0000000280))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000300)={0x1000, 0x2, {0x3, 0x2, 0x8, 0x2, 0x3}})

13:24:28 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0)
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(0x0, 0x0)

13:24:28 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:28 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x8)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r1, r0, &(0x7f00000000c0), 0x11)

13:24:28 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0x5451, 0x0)

13:24:28 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0)
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
creat(0x0, 0x0)

13:24:28 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)
getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

13:24:29 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0x5452, 0x0)

13:24:29 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="3082e281a5e7d03f1802ed39ad1fd3196dd587a39dfcfd0003a8f0268132ef82e69ebcc471b575f6f5c9b914ed4f8731a723c46745f4cce45a1a896a4f36c3bd07e281543142ed4d3254aafed4e9b881c9"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)
symlinkat(&(0x7f0000000080)='./file0\x00', r0, &(0x7f00000000c0)='./file0\x00')
r2 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)="9a237f7e4f537185f91ed446655d65252ac55a519e8ecdc29c5f89e6c16065af8db0968a", 0x24, 0xfffffffffffffffa)
setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f00000002c0), 0x4)
add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r2)

13:24:29 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:29 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))

13:24:29 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r1, r0, &(0x7f0000000000), 0x11)

13:24:29 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000280)=""/28, 0x1c)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x7, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x1, 0x0)
getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000100), &(0x7f0000000140)=0x14)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:29 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0x5460, 0x0)

13:24:29 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'bond_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@NDA_LLADDR={0xa, 0x2, @local}]}, 0x28}}, 0x0)

13:24:29 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:29 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'bond_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@NDA_LLADDR={0xa, 0x2, @local}]}, 0x28}}, 0x0)

13:24:29 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x2, 0x7, 0x5, 0x2, 0x4}, 0x14)

13:24:29 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0x40049409, 0x0)

13:24:29 executing program 5:
perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x412, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "ca819d", 0x8, 0x0, 0x0, @dev={0xfe, 0x9500, [0x0, 0x0, 0xf0ffff]}, @local, {[], @icmpv6=@echo_request}}}}}, 0x0)

[ 2819.121449][    C1] net_ratelimit: 23 callbacks suppressed
[ 2819.121458][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2819.132989][    C1] protocol 88fb is buggy, dev hsr_slave_1
13:24:30 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x4000, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYRES16=r1], 0x2)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

[ 2819.441416][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2819.447260][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2819.453087][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2819.458894][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2819.464657][    C1] protocol 88fb is buggy, dev hsr_slave_1
13:24:30 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:30 executing program 5:
prlimit64(0x0, 0x3, &(0x7f0000000080)={0x4}, 0x0)

13:24:30 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x10000, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x7)
openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x8000, 0x0)
sendfile(r0, r1, &(0x7f0000000000), 0x11)
ioctl$LOOP_SET_FD(r1, 0x4c00, r1)

[ 2819.841430][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2819.847262][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2819.853108][    C0] protocol 88fb is buggy, dev hsr_slave_0
13:24:30 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f0000000100)={0x0, 0x1, [0x2, 0x5, 0x3, 0x7ff, 0x5, 0x50, 0x8, 0x5f]})
r3 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r3, 0x1000000000013)

13:24:30 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0x4004ae8b, 0x0)

13:24:30 executing program 5:
r0 = gettid()
dup2(0xffffffffffffff9c, 0xffffffffffffffff)
ioctl$TIOCLINUX3(0xffffffffffffffff, 0x541c, 0x0)
ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
setxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0)
timerfd_gettime(0xffffffffffffffff, 0x0)
getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
tkill(r0, 0x1000000000016)

13:24:30 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x3, 0x4)

13:24:30 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00000000000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:30 executing program 5:
r0 = timerfd_create(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
fchown(r0, 0x0, 0x0)

13:24:30 executing program 5:
clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x47b, 0x41)
ioctl$IOC_PR_CLEAR(r0, 0x401070cd, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
lsetxattr$security_selinux(&(0x7f0000000180)='./bus\x00', &(0x7f0000000240)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:mount_exec_t:s0\x00', 0x22, 0x0)
execve(&(0x7f0000000380)='./bus\x00', 0x0, 0x0)

13:24:30 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0x4004ae99, 0x0)

13:24:30 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
bind$isdn(r0, &(0x7f0000000080)={0x22, 0xffffffff, 0xd5a, 0xa70, 0x1}, 0x6)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:24:31 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:31 executing program 5:
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:24:31 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x1f1000, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:24:31 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00')
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000800)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b4030000", @ANYRES16=r4, @ANYBLOB="320728bd7000fddbdf25160000002c000600080001000800000008000100180c00000400020004000200080001000500000004000200040002003000060008000100010000000400020004000200040002000400020004000200080001000000000008000100ffff00003c00020008000200fcffffff08000100ff070000040004000400040008000100ff00000004000400080002000300000008000200ffffff7f040004008c0001003c00020008000200260e00000800030008000000080002000600000008000300e404000008000200060000000800040011e9000008000300ff7f000008000300faffffff08000302000100003c000200080001000900000008000300040000000800040000100000080004000002000008000300060000000800010009000000080002001fb7000014000600080001000800000008000100040000001c000900080001000500000008000100020000000800010006000000d80004000c00010073797a31000000001400010062726f6164636173742d6c696e6b00000c00010073797a31000000001400010000000000000001ff742d6c696e6b0000540007000800020014090000080004000300000008000200ffffff7f08000300010000000800030000000000080002000001000008000400030000000800010008000000080002002000000008000200002800000c00010073797a31000000000c000700080002008000000014000700080002000100000008000400040000001400070008000300060000000800030005000000840005001c000200080001001e000000080001001100000008000200020000002c0002000800030009000000080004008b00000008000300ff0f000008000100000000000800030010f2ffff1c00020008000400080000000800040006000000080001000e0000000c000200080003000700000008000100756470000800010065746800f000010038000400200001000a004e2300000002fe800000000000000000000000000019ff0300001400020002004e24ffffffff000000000000000044000400200001000a004e23ffffff810000000000000000000000000000000100000000200002000a004e2400000009000000000000000000000000000000011f00000044000400200001000a004e2000000000fe88000000000000000000000000010108000000200002000a004e2200000008ff010000000000000000000000000001050000002c0004001400010002004e22ffffffff00000000000000001400020002004e21b01e01010000000000000000"], 0x3b4}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000)
bind$alg(r3, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(aegis256-aesni)\x00'}, 0x58)
ptrace$peek(0x2, r2, &(0x7f0000000040))
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000840)={{0xa, 0x5, 0x6, 0x7f, 'syz0\x00', 0x4}, 0x0, [0x7bcb07f4, 0x80000000, 0x8, 0x176, 0x7, 0x1fe0000000000000, 0x5, 0x7, 0x0, 0xfffffffffffffffe, 0x80, 0x1, 0x400, 0x0, 0xfffffffffffffffa, 0x1, 0x7, 0xffffffff, 0x41, 0x100000001, 0x1, 0x3, 0x3, 0x10000000000, 0x7fff, 0x8, 0x4, 0x4, 0x5, 0x4, 0x2, 0x6, 0xfff, 0xde, 0x140, 0x7, 0x1, 0x45b, 0xff, 0x1ff, 0x8, 0x40, 0x491c, 0x334, 0x4, 0x3, 0x81, 0x3, 0x9, 0xb7c, 0x1, 0x4, 0x7b, 0xffff, 0x5, 0x0, 0x4, 0x5, 0xffffffffffff8000, 0x9, 0x1, 0x8, 0x40, 0xb9bc, 0x2, 0xffffffff, 0x1ff, 0x6, 0x6, 0x6, 0x81, 0x9, 0x10000, 0x1, 0x1, 0x80, 0xe821, 0x4, 0x800, 0xe5, 0x8, 0xffffffffffffdd99, 0x6000000000, 0x587b1a5e, 0x3, 0x5, 0x1ff, 0x9, 0x100000001, 0xff, 0x1, 0x17d, 0xaf, 0x6, 0x400, 0x1, 0x0, 0xfffffffffffffffb, 0x7, 0x8, 0x6, 0x100, 0x401, 0xe3, 0x1000, 0x9845, 0x1, 0x2b, 0x6, 0x2, 0x7, 0x100000000, 0x4, 0x9, 0x6, 0x6, 0x5, 0xba27, 0x8a9a, 0xb89c, 0xffffffffffffff7f, 0x1f, 0x1, 0x5, 0xfffffffffffeffff, 0xffffffffffff8000, 0x3, 0x6], {0x0, 0x1c9c380}})
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)
gettid()

13:24:31 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0x4020940d, 0x0)

13:24:31 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00')
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f00000000c0))
ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f0000000100)={0x20000000000, 0xffffffff00000000})
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:24:31 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:31 executing program 5:
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:24:31 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0x3d6)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:24:31 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0x4048ae9b, 0x0)

13:24:31 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000080)={0x2, {{0xa, 0x4e20, 0x800, @rand_addr="cd57b94a93a1f8aed725d612c7ae8563", 0x3}}}, 0x88)
r1 = memfd_create(&(0x7f0000000300)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x400000000000000)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[], 0x0)
r2 = getuid()
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f0000000240)=0xe8)
mount$9p_tcp(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x40000, &(0x7f0000000500)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@loose='loose'}, {@noextend='noextend'}], [{@subj_type={'subj_type'}}, {@smackfsroot={'smackfsroot', 0x3d, 'selinux'}}, {@fsmagic={'fsmagic'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@euid_eq={'euid', 0x3d, r2}}, {@obj_role={'obj_role', 0x3d, '/dev/rfkill\x00'}}, {@fowner_lt={'fowner<', r3}}]}})
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000140)={'ip6gre0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:24:32 executing program 5:
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:24:32 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:32 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
epoll_pwait(r0, &(0x7f0000000080)=[{}, {}, {}], 0x3, 0x2, &(0x7f00000000c0)={0x1ff}, 0x8)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:24:32 executing program 5:
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:24:32 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x4, @thr={&(0x7f0000000400)="699ef44de084bdcddf79fc128c73cc4791000f4da3ba2ffd3e0597f3800a8514b877d365b3e1a9387b2e24c1e91dd2ee259a8f9908e8a2838e10aac649f71e662a0801f986b5d254f8585544962d5fa66889dcdc21a4946183a3e6a2806023bc81533e1baf08b34b06e450da25086fa870735a6e646400bf419800030a5889ee78d7", &(0x7f00000004c0)="ee732bebc7acc3280d4f4c97bcb6b6d86c3b075381c18776d4f4815e0550a643cc0c8eab224715c98b43c7d6f0db06c290c53527559681c14067cae60a8d89131acec9c154bb7f46887a278563b86a88126fbecf83c0a05afc23d3aa881ff205d436f00fe1f012c7bac9cca6f796bbef62173002b5148a8b5d7eeec4af6a277cda98f51a5a1dbe0b21133b382633ddb0670c2a4b17526ee14fc47945c9de3535b669e88bf09ecfa695e361d3d7f6de1522622b4ce095f05065c95d389a4c6d306ca9b0e83b62529cc25b4b0264d951"}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:32 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0x4090ae82, 0x0)

13:24:32 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
openat$cgroup_ro(r0, &(0x7f0000000080)='pids.events\x00', 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="3f1802ed0003a867fc652fad5e271efcc1fd05b736ce58a569026e2ee54526661f43f904a3413d3f6a12042903e23133391831da97302a68279620e967e5112a06ad471c681de1ac25ae3c8d1ca19370374f840d746e4bf0a6994700be778aea2c9db1ba286f1166bdb3b801addcba46ecb50dae7d21ad46adcc060092c8293b45626a3730b71c13222fcf33cbc4602b066a31f432dc65ae8b2a7f6b76e8b46f1a91c758f7ecf41c8859eba5c2b5292d8d37a69ce27f24df46fe"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:24:32 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:32 executing program 5:
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:24:32 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
ioctl$SIOCNRDECOBS(r0, 0x89e2)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000100)={0x10d000, &(0x7f00000000c0), 0x4, r0, 0x1})
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="e3c2b7b5b7f5ffff65e5fdece3021f000000"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:24:32 executing program 5:
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:24:32 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0x4138ae84, 0x0)

13:24:33 executing program 5:
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:24:33 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:33 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3f1802eded03a8919e4692ad7cb1259abe32ca5c6cf5e6f4323c52f372998d6734339c4ba44d24ab203ae7aeb8de9248cb84c5a11ea4e9966fa542b9d5f208f68e21f2dc8d0842c082a634c5341fa2dfc2421ea3568a30425a61d64e2666ab0433ea0044935d4e02ee8fff7d3e811add6458497028057645dc565f582fac051b3c197d637775efa527f7b38a0ba5e928ccf1e5302360bf8def076df6e023e88ad2074ace4bd3"], 0x7)
ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000000080)=0x100)
sendfile(r1, r1, &(0x7f00000002c0), 0x6)
ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0)

13:24:33 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:24:35 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x200000)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:35 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0x41a0ae8d, 0x0)

13:24:35 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f00000000c0)=0x95e6, 0x4)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000080)={0x2, [0xc00000000000, 0x10000]}, 0x8)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:24:35 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:24:35 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:35 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:35 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:24:35 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:24:35 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x20884, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache='fscache'}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@pcr={'pcr', 0x3d, 0x37}}, {@smackfshat={'smackfshat', 0x3d, 'posix_acl_access.'}}, {@seclabel='seclabel'}, {@measure='measure'}, {@obj_type={'obj_type', 0x3d, '/dev/rfkill\x00'}}]}})
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)
getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000300)={'HL\x00'}, &(0x7f0000000340)=0x1e)

13:24:35 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:24:36 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:24:36 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0x8004ae98, 0x0)

[ 2825.361449][    C1] net_ratelimit: 23 callbacks suppressed
[ 2825.361457][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2825.372902][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2825.681466][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2825.687282][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2825.693109][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2825.698852][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2825.704610][    C1] protocol 88fb is buggy, dev hsr_slave_1
13:24:36 executing program 3:
read(0xffffffffffffffff, &(0x7f0000000200)=""/28, 0xfe69)
arch_prctl$ARCH_SET_GS(0x1001, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000380))
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r1 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1000000000013)

13:24:36 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:24:36 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:24:36 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0x8090ae81, 0x0)

13:24:36 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00000000000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:36 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:36 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2826.081438][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2826.087300][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2826.093134][    C0] protocol 88fb is buggy, dev hsr_slave_0
13:24:36 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x8800, 0x0)
recvfrom$rxrpc(r3, &(0x7f0000000100)=""/91, 0x5b, 0x10040, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @multicast1}}, 0x24)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:36 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f0000000380)='/dev/rfkill\x00', 0x7)
ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000340)={0x17, 0x10, 0x7, 0x7, 0x9, 0x0, 0x3, 0xf5, 0xffffffffffffffff})
r2 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f00000000c0)={<r4=>0x0, <r5=>0x0})
ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000140)={0x9, 0xb, 0x4, 0x800, {r4, r5/1000+10000}, {0x7, 0x1, 0x3, 0x0, 0x7, 0x8, "a7a56909"}, 0x2, 0x4, @planes=&(0x7f0000000100)={0x6, 0xf8e, @fd=<r6=>r0, 0x4f}, 0x4})
kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r6, &(0x7f0000000300)={r0, r0, 0x400})
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x1, 0x10400)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:24:36 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:24:37 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0x8138ae83, 0x0)

13:24:37 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:24:37 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:24:37 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f00000003c0)={0xbe, 0x5, 0xfffffffffffffff9, 0x1a, &(0x7f0000000100)=""/26, 0x8f, &(0x7f0000000300)=""/143, 0x5e, &(0x7f0000000140)=""/94})
ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f0000000080)={0x7, 'syz0\x00'})
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="0ae3d390fadaaac8eb65818d7d7eaf095c37bb3379508c22069883a36c6500df093aab7d1efe498871c6af90f3cf1239217584d68fb458dd6e178fcb8780e7dcd79de380c3bf771b09dc05616e864585802d804ab5e898dda6936062e7ee03a92cd1e2182e6976b075d502a18138b6bf9744b131d8fa5e2f1103958e534d73d3c9fe266bdff7dee690881dcb4c67e157d795cbf6705af31d7ce3c3b1aaa2a773522764aec91e349e42d5238c0a48faf3e6ee89d1ba8a22d29c650e10dfc2f0322ee63a6d"], 0x7)
ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f00000000c0)={0x2, r0})
sendfile(r0, r1, &(0x7f0000000000), 0x11)
accept$inet6(r0, 0x0, &(0x7f00000002c0))
ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000001640)={0x800, 0xe19, 0x6, 0x1000, &(0x7f0000000500)=""/4096, 0xa0, &(0x7f0000001500)=""/160, 0x69, &(0x7f00000015c0)=""/105})

13:24:37 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:24:37 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0x81a0ae8c, 0x0)

13:24:37 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:37 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:37 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xfffffffffffffec5)
ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000080)=0xfff)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:24:37 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0xfffffffffffffffc, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={&(0x7f0000000300)="52bdd750e10c1f16bbe970992f54d63df9777d86e4edc3eecc9f594006da87440a1e152284148b24f2d86788aef21f40abc35e702687f3666b4bffdf2ee90df53c636ab5682d5e843c4520", &(0x7f0000000400)="47c63ba0211a4290a1c1eec25ba898506ad1af5b3755a6bef05427d5c2dbf3a3d3ce1f088d8ef1670d536870681c36638a84770c35fd2ea2ba9325c79625c380bf84da4c0b00493b528244c4eaf6b1b9d6459bcbe3548c46887c4e8b512f145cf56473f3b21033d573af914a26656160732394966fcd78e3f84bc174973d853f93d8a5e65442dc509e535e1c1afad4e272130c271487cc7aedc2f25f86bba784157d806c979d4f51ec6a1c7ea1f8a49c6325418455b8cda731330bb60ff405b8bf5b0b9356d754eb"}}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:37 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:24:37 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xc0045878, 0x0)

13:24:37 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x280, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x100, 0x10100)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:24:38 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f0000000800)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4\x00\x00\x14\xb0p.\\O\x90]\xd7\xdf\x94\xc2\x01=\x8f\x0e\x96+J\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfa\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\x00\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1\xc2F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e%\xcb\n{\"\xecD\xfa\xdeuCV\x8a\xd2\xffv,\xd4\xedy\xab6\xe3a\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xd5\xe6\x1f\xd1R\xbeF\xbaL\x93z\x01\xcaE\xc3\x7f\x86T\xf9\b*\x8cH\xde#\xed+g\n\x0fn\xae\x9e8e\x009\x91jCV\x14?p\xad\x86\xef\xab\xf9\x1a|fT\xa74\xf1\xaaz\xa3\x84\xbc\xd4\x89To\xdf\x1f\x87\xbc\xd1\xa0=>\xf9\x17|U\x86\xa5\xaf\x13\x1c\x89r\xa9\xa2\xab\xbag\xda\xe6\x17\xc6\x1d\xda\xc1\xe8^1\x8ee\xe8^;\xf4\xbad\x15\xad\x1a{\xc4\xf02\xc6\x18\x88a~9K\x18\x1cVc\xf2ki5\x97\xa2\xc1\x9dgB\x1b1o\x7f\xa8\x84\x10\x84<L\x82\x04D_q\xc1\xd1U\x9fh\x80\xef\xa4\xd1V\"\xea\xad1\xce\xbf\xaa\xacU\xf4\xf5t\x7f\xee\xcc,\x973\b}b\x00\xd2,\xb5!C\x1a\x953%-\xdf\xa0\a\xda`U\xe1\x047\x915\xe2}P\xe7\xb8u\xc0\x03\x1fY\xa6\xd0\x92\xda\x9fY\x11\xd9\x02!H\ft \xea\xb8\'&{\b\a/!\x8cW\x03\xf2\xae\xf5a\xa2P\xfa\xbaA\xc5\x16\xaf9O\xce\xd7\x18\xdf\xe2\xe2\"\x1dXJ}\xc5T\xfbG\t+\xa1\xd4\x98\xce\x0e~\xa2.t\x1dx\xbdl\x04B\x0f\xb5\xf7N\x9eO3W\x9b\x10\xc0f\x84=O\xc0[\x1a\xc8\xba\xd7\xc3\xce\xcc\xf5:\xc59\x90\xf8pzfP\xc2\x14\xe6OF\xe2\xe9G\xad&\xa4\xb8\xdb\xe6\xe8f\x82W\xbe\v\x87\xab!\x9e\x9f\x87Q]\t\xf9\xda\xaa6E\'\v\n\xf8?\xd2\x9a\x83\x9f\xd3gD\x83\xba\xe3\xc2\\$c\xdbj\xea^\xc5]\xcce\xa1#\xdd\x8d\x15`\x0f\xe6\xd7\b\xc3\fI\x11\xebf\xd4\xee\x9f+Nw%w\xb3\xf2G\xb1\xd4\x03\x91\xc4\xf9- \\\x88\x1c\x99F\xd6W\x8a\xe3\\\xf5[\x9d\xde(\xe0)W\x88\x1e\x13C\b\xc2\xec#\x84\xb6L\xf6@ \xf5}\x00\x00Z\xd6\v\xf2\x11\xf6\xc5\x9b\xfc\xacg\xb5\x13P\x80\xc4\x91j\xa9\x1b\f\xc4\xa2\x06Y', 0x2)
write$P9_RMKNOD(r0, &(0x7f0000000080)={0x14, 0x13, 0x2, {0x0, 0x2, 0x3}}, 0x14)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802ed0003a8"], 0x7)
sendfile(r0, r1, &(0x7f0000000000), 0x11)
ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f00000000c0)={0x75a7, 0x80})

13:24:38 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:24:38 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:24:38 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xc0045878, 0x0)

13:24:38 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:24:38 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:38 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:38 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="7be010ff917dbe0f0e2fa93718a44dc27d92afa752ee23f6497513feea95cad922423e9d531cec2a462a2d2100a84a824830803e9df4439eec3cf9e379527a500c9f65cde7792d81f35d1ed3d388a9b4ff74b710b458e12aeba5993a3bf5626d80d2834fa25f1adbe26d409a185974b3ac88b191f4dad937a472eeb427ad564ecc807200c3f11f6598fee91ccde2c563965e"], 0x7)
set_thread_area(&(0x7f0000000080)={0xfffffffffffffff9, 0xffffffffffffffff, 0x0, 0x0, 0x80, 0x1f, 0xbe, 0x7, 0x3, 0x100000001})
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:24:40 executing program 3:
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x101000, 0x0)
write$P9_RCREATE(r0, &(0x7f0000000100)={0x18, 0x73, 0x1, {{0x8, 0x1}, 0x3}}, 0x18)
r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r1, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000380))
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r3 = gettid()
syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x14000)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r3, 0x1000000000013)

13:24:40 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x260}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:24:40 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xc0189436, 0x0)

13:24:40 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f0000000300)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x04T\x94A \xdb#\xcaODx \xbdx\xef\xc6\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4Kdm}\xd6\x94\x17Guf\xc0\xa4GU\x8fQ\xad\rGZ\xf3Q\xdf/|\xd9>\xd3\v[\xf35\xdc/\xe5\xf6\xf5g\x9fy\x90\xb3\x16U\xa8\xffL\xfb\x8f\x1f\xee\a\x94A\xe1\x1cp\xfd\xab\xeav\x00\xec\xf0;9\xd9\xc3}1\xe0d\xa3\t\xd1-\xc7\xa5m\x8e\xa8\xee8xb\x8d\xac\xe5\x9b\xc0\x91~\xe4\x14\x8e\x99\x17p}\xca\xf6W%\xf7y\xda,\x05n\x93\xb8\xef\x01\xfe\x9c\xee\xac\'\xb7+\xf0r\b,)\xa3F\xdf\xdd\x81\xe9\x86\x9a\xf8V\xe4\x1b\x9ce\xe5\xcfh\xf5_\x9f\xd0\xccX\xde\x97\xe0\x1c\x95\x8c`\x1f\x18\x8f\xb3\xb2\xd5\xa9rm\xd3\x9dDWZ|\xfc\x141\x88N\xc4\x0e\x84_\x12\xd8\xca\x83\xec)\xc6\r\x05\xc4M`', 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="431882fb0a07a8"], 0x7)
syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x0, 0x2)
ioctl$KVM_SET_BOOT_CPU_ID(r0, 0xae78, &(0x7f00000001c0)=0x2)
epoll_wait(r0, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x6)
syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x40, 0x200)
sendfile(r0, r1, &(0x7f0000000000), 0x11)

13:24:40 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:40 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:41 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x260}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:24:41 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0)
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x0)
sendfile(r0, r1, &(0x7f0000000000), 0x11)
setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000080)={{0x73, @multicast2, 0x4e20, 0x2, 'lblc\x00', 0x4, 0xfffffffffffff801, 0x30}, {@local, 0x4e24, 0x2003, 0x8a11, 0x3eac, 0x4}}, 0x44)

13:24:41 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xc018ae85, 0x0)

13:24:41 executing program 1:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = gettid()
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}, 0x20420}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unshare(0x40000000)
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0xbffd)
fcntl$setownex(r0, 0xf, &(0x7f0000000340)={0x2, r1})
write$P9_RREADDIR(r2, 0x0, 0xfffffffffffffec9)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc)
statx(0xffffffffffffffff, &(0x7f0000000280)='./bus\x00', 0x0, 0x4, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='\x96\xd7#1g\xefse\x83\xb0\x11sJ[\xa2\b\x00\x00\x00\xf97\x87;:\x85e5m\x8d\x95\xf64\xb8\xe9\x8c9\x18\xef@\xb61\x12^(\xb6\x02\xecu\xed\xd1U7\xd0Ac\x00\xe7N\x03\x9c\xf8k\xb8\x95\x9e\xb9A\x10\xae\xe1')
syz_open_dev$evdev(0x0, 0x0, 0x0)
accept(0xffffffffffffff9c, 0x0, 0x0)
r4 = dup(0xffffffffffffffff)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000300))
r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
stat(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000440))
ftruncate(r5, 0x208200)
r6 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0)
epoll_create(0xd1fd)
prctl$PR_SET_SECUREBITS(0x1c, 0x2)
fremovexattr(0xffffffffffffffff, &(0x7f0000000400)=@known='com.apple.FinderInfo\x00')
ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000100)={0x0, 0x0})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r6, 0x0)
write$P9_RVERSION(r4, &(0x7f00000002c0)={0x15, 0x65, 0xffff, 0x87, 0x8, '9P2000.u'}, 0x15)

13:24:41 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x260}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:24:41 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xc020660b, 0x0)

[ 2830.542853][T30286] IPVS: ftp: loaded support on port[0] = 21
13:24:41 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)
r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xffff, 0x402000)
ioctl$KVM_KVMCLOCK_CTRL(r3, 0xaead)

13:24:41 executing program 5:
prlimit64(0x0, 0x3, &(0x7f0000000080), 0x0)

13:24:41 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x2)

13:24:41 executing program 1:
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:24:41 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:41 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:42 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x0)
close(r0)
getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0)
socketpair$unix(0x1, 0x10000000000002, 0x0, &(0x7f0000000100))
setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000080)={'mangle\x00', 0x3, [{}, {}, {}]}, 0x58)
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4)

13:24:42 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:24:42 executing program 1:
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
add_key$keyring(0x0, &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)
add_key(0x0, &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000001a80)="b7feb58638d4bf8dfafcdf7772f14b127341adba280fd79cc810085b0ac4a6bfbb03a22eb9a4958ee8a0", 0x2a, 0xfffffffffffffff8)
getegid()
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000200)=ANY=[])
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = timerfd_create(0x0, 0x80800)
timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/249, 0xf9}], 0x1)
unshare(0x20600)
prctl$PR_CAPBSET_READ(0x17, 0x0)
r1 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x5, 0x8c000)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000640)=[@in6={0xa, 0x0, 0x7, @mcast1}, @in={0x2, 0x4e20, @rand_addr=0x9}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, @in={0x2, 0x4e21, @loopback}], 0x3f3)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000340)=@assoc_value, 0x8)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00')
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x101, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x4)

13:24:42 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x6, 0x7fffffff)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x141080, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000480)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'})
ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000680)={0x1, 0x1, [0xfff, 0x101, 0x3ff, 0x40, 0x0, 0xfffffffffffffffb, 0x8, 0x4f]})
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f00000004c0))
openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x20a000, 0x0)
ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000d80)="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")
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/sequencer2\x00', 0x40042, 0x0)
sendto$inet(r0, &(0x7f00000000c0)="8dec431bb44aff53a310b4eabef65b9ca28574570c8753d962784ce7563c1f448215fd237bf4c9159a98e9205a38a1fef116825d2a67dccc355557378e26b4e71c9ead8245ce8f8727e4d5e348d6b048462955248e97e362bb149adcd5ad849873b82111c2ecfa383140f9d4c99f525041a886277a6592dbc6b9108911e88a440b93f5c0fae544676b44a19bf06aa255a549db9cb0a9221a90f33fec43b1d074bf", 0xa1, 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f00000008c0)='fou\x00')
sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000580)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="000028bd7000fddbdf250200080001004e230000"], 0x1}, 0x1, 0x0, 0x0, 0x20044000}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="3b141f0e9d0c49e20700000019fa30a0970000c45d6c2b44e6"], 0x1}, 0x1, 0x0, 0x0, 0x8050}, 0x40)
r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25d1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$session_to_parent(0x12)
ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x4000000000000200)
dup2(r4, r3)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0xc81, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0xfffffffffffffffd, 0x40100)
getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000300)={0x0, @remote, @loopback}, &(0x7f0000000340)=0xc)
sendmsg$nl_route(r6, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4008000)
ioctl$sock_proto_private(r5, 0x80089ec, &(0x7f0000000140)="039625617620978a4df541244054545eefb285b44d2198c37642636f3bd6084339c6e79154e7a4e1e8a3a316d5a4d756fa828508c3eaae4df2759d4d16de576413772f248c74aae160e44749d604a7af5290efc74ba837ec71ff4bfb5f9a2d51403ecc6b5a4bb2dab710e3367549b45cd0b3fed1c251372400872f340ee3b348964d022f3224519d06adad720a5650c9b04292955ae6fd364adebee641bc911bcdd907f409e8200d95b946789c69b1d8876c")
r7 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0xff, 0x80000)
syz_open_dev$sndtimer(&(0x7f0000000380)='/dev/snd/timer\x00', 0x0, 0x4080)
ioctl$VT_GETMODE(r7, 0x5601, &(0x7f0000000240))
setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000000)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108)

13:24:42 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x4)

[ 2831.448872][T30844] bond0: Releasing backup interface bond_slave_1
[ 2831.601780][    C1] net_ratelimit: 23 callbacks suppressed
[ 2831.601806][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2831.613471][    C1] protocol 88fb is buggy, dev hsr_slave_1
13:24:42 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x6, 0x7fffffff)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x141080, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000480)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'})
ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000680)={0x1, 0x1, [0xfff, 0x101, 0x3ff, 0x40, 0x0, 0xfffffffffffffffb, 0x8, 0x4f]})
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f00000004c0))
openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x20a000, 0x0)
ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000d80)="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")
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/sequencer2\x00', 0x40042, 0x0)
sendto$inet(r0, &(0x7f00000000c0)="8dec431bb44aff53a310b4eabef65b9ca28574570c8753d962784ce7563c1f448215fd237bf4c9159a98e9205a38a1fef116825d2a67dccc355557378e26b4e71c9ead8245ce8f8727e4d5e348d6b048462955248e97e362bb149adcd5ad849873b82111c2ecfa383140f9d4c99f525041a886277a6592dbc6b9108911e88a440b93f5c0fae544676b44a19bf06aa255a549db9cb0a9221a90f33fec43b1d074bf", 0xa1, 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f00000008c0)='fou\x00')
sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000580)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="000028bd7000fddbdf250200080001004e230000"], 0x1}, 0x1, 0x0, 0x0, 0x20044000}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="3b141f0e9d0c49e20700000019fa30a0970000c45d6c2b44e6"], 0x1}, 0x1, 0x0, 0x0, 0x8050}, 0x40)
r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25d1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$session_to_parent(0x12)
ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x4000000000000200)
dup2(r4, r3)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0xc81, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0xfffffffffffffffd, 0x40100)
getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000300)={0x0, @remote, @loopback}, &(0x7f0000000340)=0xc)
sendmsg$nl_route(r6, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4008000)
ioctl$sock_proto_private(r5, 0x80089ec, &(0x7f0000000140)="039625617620978a4df541244054545eefb285b44d2198c37642636f3bd6084339c6e79154e7a4e1e8a3a316d5a4d756fa828508c3eaae4df2759d4d16de576413772f248c74aae160e44749d604a7af5290efc74ba837ec71ff4bfb5f9a2d51403ecc6b5a4bb2dab710e3367549b45cd0b3fed1c251372400872f340ee3b348964d022f3224519d06adad720a5650c9b04292955ae6fd364adebee641bc911bcdd907f409e8200d95b946789c69b1d8876c")
r7 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0xff, 0x80000)
syz_open_dev$sndtimer(&(0x7f0000000380)='/dev/snd/timer\x00', 0x0, 0x4080)
ioctl$VT_GETMODE(r7, 0x5601, &(0x7f0000000240))
setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000000)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108)

[ 2831.921491][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2831.927307][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2831.933626][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2831.939462][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2831.945274][    C1] protocol 88fb is buggy, dev hsr_slave_1
13:24:42 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0xf)

13:24:42 executing program 1:
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
add_key$keyring(0x0, &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)
add_key(0x0, &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000001a80)="b7feb58638d4bf8dfafcdf7772f14b127341adba280fd79cc810085b0ac4a6bfbb03a22eb9a4958ee8a0", 0x2a, 0xfffffffffffffff8)
getegid()
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000200)=ANY=[])
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = timerfd_create(0x0, 0x80800)
timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/249, 0xf9}], 0x1)
unshare(0x20600)
prctl$PR_CAPBSET_READ(0x17, 0x0)
r1 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x5, 0x8c000)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000640)=[@in6={0xa, 0x0, 0x7, @mcast1}, @in={0x2, 0x4e20, @rand_addr=0x9}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, @in={0x2, 0x4e21, @loopback}], 0x3f3)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000340)=@assoc_value, 0x8)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00')
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x101, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x4)

13:24:42 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x6, 0x7fffffff)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x141080, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000480)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'})
ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000680)={0x1, 0x1, [0xfff, 0x101, 0x3ff, 0x40, 0x0, 0xfffffffffffffffb, 0x8, 0x4f]})
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f00000004c0))
openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x20a000, 0x0)
ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000d80)="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")
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/sequencer2\x00', 0x40042, 0x0)
sendto$inet(r0, &(0x7f00000000c0)="8dec431bb44aff53a310b4eabef65b9ca28574570c8753d962784ce7563c1f448215fd237bf4c9159a98e9205a38a1fef116825d2a67dccc355557378e26b4e71c9ead8245ce8f8727e4d5e348d6b048462955248e97e362bb149adcd5ad849873b82111c2ecfa383140f9d4c99f525041a886277a6592dbc6b9108911e88a440b93f5c0fae544676b44a19bf06aa255a549db9cb0a9221a90f33fec43b1d074bf", 0xa1, 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f00000008c0)='fou\x00')
sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000580)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="000028bd7000fddbdf250200080001004e230000"], 0x1}, 0x1, 0x0, 0x0, 0x20044000}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="3b141f0e9d0c49e20700000019fa30a0970000c45d6c2b44e6"], 0x1}, 0x1, 0x0, 0x0, 0x8050}, 0x40)
r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25d1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$session_to_parent(0x12)
ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x4000000000000200)
dup2(r4, r3)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0xc81, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0xfffffffffffffffd, 0x40100)
getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000300)={0x0, @remote, @loopback}, &(0x7f0000000340)=0xc)
sendmsg$nl_route(r6, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4008000)
ioctl$sock_proto_private(r5, 0x80089ec, &(0x7f0000000140)="039625617620978a4df541244054545eefb285b44d2198c37642636f3bd6084339c6e79154e7a4e1e8a3a316d5a4d756fa828508c3eaae4df2759d4d16de576413772f248c74aae160e44749d604a7af5290efc74ba837ec71ff4bfb5f9a2d51403ecc6b5a4bb2dab710e3367549b45cd0b3fed1c251372400872f340ee3b348964d022f3224519d06adad720a5650c9b04292955ae6fd364adebee641bc911bcdd907f409e8200d95b946789c69b1d8876c")
r7 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0xff, 0x80000)
syz_open_dev$sndtimer(&(0x7f0000000380)='/dev/snd/timer\x00', 0x0, 0x4080)
ioctl$VT_GETMODE(r7, 0x5601, &(0x7f0000000240))
setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000000)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108)

13:24:42 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:42 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
clock_gettime(0x0, &(0x7f00000005c0))
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000c1, @tick=0xc5b1, 0x7fffffffffffffe, {0x200}, 0x800})
tee(r0, r0, 0xfff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='pids.current\x00', 0x0, 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x480}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)={0xa0, r4, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x29}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x48, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x14, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40080}, 0x800)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
getsockopt$inet6_dccp_buf(r5, 0x21, 0xc2, &(0x7f0000000400)=""/185, &(0x7f0000000140)=0xb9)

13:24:42 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:43 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x6, 0x7fffffff)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x141080, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000480)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'})
ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000680)={0x1, 0x1, [0xfff, 0x101, 0x3ff, 0x40, 0x0, 0xfffffffffffffffb, 0x8, 0x4f]})
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f00000004c0))
openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x20a000, 0x0)
ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000d80)="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")
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/sequencer2\x00', 0x40042, 0x0)
sendto$inet(r0, &(0x7f00000000c0)="8dec431bb44aff53a310b4eabef65b9ca28574570c8753d962784ce7563c1f448215fd237bf4c9159a98e9205a38a1fef116825d2a67dccc355557378e26b4e71c9ead8245ce8f8727e4d5e348d6b048462955248e97e362bb149adcd5ad849873b82111c2ecfa383140f9d4c99f525041a886277a6592dbc6b9108911e88a440b93f5c0fae544676b44a19bf06aa255a549db9cb0a9221a90f33fec43b1d074bf", 0xa1, 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f00000008c0)='fou\x00')
sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000580)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="000028bd7000fddbdf250200080001004e230000"], 0x1}, 0x1, 0x0, 0x0, 0x20044000}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="3b141f0e9d0c49e20700000019fa30a0970000c45d6c2b44e6"], 0x1}, 0x1, 0x0, 0x0, 0x8050}, 0x40)
r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25d1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$session_to_parent(0x12)
ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x4000000000000200)
dup2(r4, r3)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0xc81, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0xfffffffffffffffd, 0x40100)
getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000300)={0x0, @remote, @loopback}, &(0x7f0000000340)=0xc)
sendmsg$nl_route(r6, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4008000)
ioctl$sock_proto_private(r5, 0x80089ec, &(0x7f0000000140)="039625617620978a4df541244054545eefb285b44d2198c37642636f3bd6084339c6e79154e7a4e1e8a3a316d5a4d756fa828508c3eaae4df2759d4d16de576413772f248c74aae160e44749d604a7af5290efc74ba837ec71ff4bfb5f9a2d51403ecc6b5a4bb2dab710e3367549b45cd0b3fed1c251372400872f340ee3b348964d022f3224519d06adad720a5650c9b04292955ae6fd364adebee641bc911bcdd907f409e8200d95b946789c69b1d8876c")
r7 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0xff, 0x80000)
syz_open_dev$sndtimer(&(0x7f0000000380)='/dev/snd/timer\x00', 0x0, 0x4080)
ioctl$VT_GETMODE(r7, 0x5601, &(0x7f0000000240))
setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000000)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108)

[ 2832.321455][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2832.327323][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2832.333172][    C0] protocol 88fb is buggy, dev hsr_slave_0
13:24:43 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x30)

13:24:43 executing program 1:
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
add_key$keyring(0x0, &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)
add_key(0x0, &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000001a80)="b7feb58638d4bf8dfafcdf7772f14b127341adba280fd79cc810085b0ac4a6bfbb03a22eb9a4958ee8a0", 0x2a, 0xfffffffffffffff8)
getegid()
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000200)=ANY=[])
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = timerfd_create(0x0, 0x80800)
timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/249, 0xf9}], 0x1)
unshare(0x20600)
prctl$PR_CAPBSET_READ(0x17, 0x0)
r1 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x5, 0x8c000)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000640)=[@in6={0xa, 0x0, 0x7, @mcast1}, @in={0x2, 0x4e20, @rand_addr=0x9}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, @in={0x2, 0x4e21, @loopback}], 0x3f3)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000340)=@assoc_value, 0x8)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00')
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x101, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x4)

13:24:43 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x6, 0x7fffffff)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x141080, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000480)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'})
ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000680)={0x1, 0x1, [0xfff, 0x101, 0x3ff, 0x40, 0x0, 0xfffffffffffffffb, 0x8, 0x4f]})
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f00000004c0))
openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x20a000, 0x0)
ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000d80)="e2da5cdea423495c8b5663b2d9e462f4e65c25cc8b2ba5e1349cd9ae758d94c045f53f48860fd0b3d8013a69034f6ac0d6e1e98dfe38d2d9e2e2c54d473c67bfa22bbf07fadb6002cda4dd466bf8b4ac1fd7837039b702c7d0fa204a8e5df87c3de67d40844e3ddd3c120aee61b90f3b98210922d8d4271c6df39457ffa88a8a1c33837414408c58e56e3fc11ec40ec466928864d45fe30bbdca4189941c975bc6fe8fb0e6bf8e2a58131d1b5d088066c68b8a6ee0c4e1fea78983de57627ebf6f449a310f966c64391d936f99802fb9320ae1cc42997d1c5b39aa63619766cdd7c49de2caa9ca8f32bfdf837965e855c845ae541a482d0d536da37077d0660716a372e9b88473775a174c88e076f65cbd2eb057abcda6cf1f0defae4ae5d834cd4650b5e9a63e181e8d76a19d25351248870ba9a9d07a9caa02095e6471c8e479414fb098265dc0876772cecdad16beea0506c77b35df5eb725d3bd3adc681bc08ea9df3762b58b4e3daf2ac07ec27d57fad4d05925f4091b4f870f447f4f8902205e086405dad220b29478b578bb0baa2cc68a087ca211d2f5fe6098ca2d3e4e6a642125a9cb62d6754c84a182a5d29c2a8917716b63f5f43573ef15622a32e6f1bcba3d7f6200da9a82de84dc95ee8f2b0f88d20593a6a03e")
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/sequencer2\x00', 0x40042, 0x0)
sendto$inet(r0, &(0x7f00000000c0)="8dec431bb44aff53a310b4eabef65b9ca28574570c8753d962784ce7563c1f448215fd237bf4c9159a98e9205a38a1fef116825d2a67dccc355557378e26b4e71c9ead8245ce8f8727e4d5e348d6b048462955248e97e362bb149adcd5ad849873b82111c2ecfa383140f9d4c99f525041a886277a6592dbc6b9108911e88a440b93f5c0fae544676b44a19bf06aa255a549db9cb0a9221a90f33fec43b1d074bf", 0xa1, 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f00000008c0)='fou\x00')
sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000580)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="000028bd7000fddbdf250200080001004e230000"], 0x1}, 0x1, 0x0, 0x0, 0x20044000}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="3b141f0e9d0c49e20700000019fa30a0970000c45d6c2b44e6"], 0x1}, 0x1, 0x0, 0x0, 0x8050}, 0x40)
r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25d1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$session_to_parent(0x12)
ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x4000000000000200)
dup2(r4, r3)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0xc81, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0xfffffffffffffffd, 0x40100)
getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000300)={0x0, @remote, @loopback}, &(0x7f0000000340)=0xc)
sendmsg$nl_route(r6, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4008000)
ioctl$sock_proto_private(r5, 0x80089ec, &(0x7f0000000140)="039625617620978a4df541244054545eefb285b44d2198c37642636f3bd6084339c6e79154e7a4e1e8a3a316d5a4d756fa828508c3eaae4df2759d4d16de576413772f248c74aae160e44749d604a7af5290efc74ba837ec71ff4bfb5f9a2d51403ecc6b5a4bb2dab710e3367549b45cd0b3fed1c251372400872f340ee3b348964d022f3224519d06adad720a5650c9b04292955ae6fd364adebee641bc911bcdd907f409e8200d95b946789c69b1d8876c")
r7 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0xff, 0x80000)
syz_open_dev$sndtimer(&(0x7f0000000380)='/dev/snd/timer\x00', 0x0, 0x4080)
ioctl$VT_GETMODE(r7, 0x5601, &(0x7f0000000240))
setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000000)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108)

13:24:43 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0xf00)

13:24:43 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x6, 0x7fffffff)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x141080, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000480)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'})
ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000680)={0x1, 0x1, [0xfff, 0x101, 0x3ff, 0x40, 0x0, 0xfffffffffffffffb, 0x8, 0x4f]})
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f00000004c0))
openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x20a000, 0x0)
ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000d80)="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")
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/sequencer2\x00', 0x40042, 0x0)
sendto$inet(r0, &(0x7f00000000c0)="8dec431bb44aff53a310b4eabef65b9ca28574570c8753d962784ce7563c1f448215fd237bf4c9159a98e9205a38a1fef116825d2a67dccc355557378e26b4e71c9ead8245ce8f8727e4d5e348d6b048462955248e97e362bb149adcd5ad849873b82111c2ecfa383140f9d4c99f525041a886277a6592dbc6b9108911e88a440b93f5c0fae544676b44a19bf06aa255a549db9cb0a9221a90f33fec43b1d074bf", 0xa1, 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f00000008c0)='fou\x00')
sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000580)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="000028bd7000fddbdf250200080001004e230000"], 0x1}, 0x1, 0x0, 0x0, 0x20044000}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="3b141f0e9d0c49e20700000019fa30a0970000c45d6c2b44e6"], 0x1}, 0x1, 0x0, 0x0, 0x8050}, 0x40)
r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25d1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$session_to_parent(0x12)
ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x4000000000000200)
dup2(r4, r3)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0xc81, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0xfffffffffffffffd, 0x40100)
getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000300)={0x0, @remote, @loopback}, &(0x7f0000000340)=0xc)
sendmsg$nl_route(r6, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4008000)
ioctl$sock_proto_private(r5, 0x80089ec, &(0x7f0000000140)="039625617620978a4df541244054545eefb285b44d2198c37642636f3bd6084339c6e79154e7a4e1e8a3a316d5a4d756fa828508c3eaae4df2759d4d16de576413772f248c74aae160e44749d604a7af5290efc74ba837ec71ff4bfb5f9a2d51403ecc6b5a4bb2dab710e3367549b45cd0b3fed1c251372400872f340ee3b348964d022f3224519d06adad720a5650c9b04292955ae6fd364adebee641bc911bcdd907f409e8200d95b946789c69b1d8876c")
r7 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0xff, 0x80000)
syz_open_dev$sndtimer(&(0x7f0000000380)='/dev/snd/timer\x00', 0x0, 0x4080)
ioctl$VT_GETMODE(r7, 0x5601, &(0x7f0000000240))
setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000000)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108)

13:24:43 executing program 1:
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
add_key$keyring(0x0, &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)
add_key(0x0, &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000001a80)="b7feb58638d4bf8dfafcdf7772f14b127341adba280fd79cc810085b0ac4a6bfbb03a22eb9a4958ee8a0", 0x2a, 0xfffffffffffffff8)
getegid()
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000200)=ANY=[])
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = timerfd_create(0x0, 0x80800)
timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/249, 0xf9}], 0x1)
unshare(0x20600)
prctl$PR_CAPBSET_READ(0x17, 0x0)
r1 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x5, 0x8c000)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000640)=[@in6={0xa, 0x0, 0x7, @mcast1}, @in={0x2, 0x4e20, @rand_addr=0x9}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, @in={0x2, 0x4e21, @loopback}], 0x3f3)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000340)=@assoc_value, 0x8)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00')
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x101, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x4)

13:24:43 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x6, 0x7fffffff)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x141080, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000480)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'})
ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000680)={0x1, 0x1, [0xfff, 0x101, 0x3ff, 0x40, 0x0, 0xfffffffffffffffb, 0x8, 0x4f]})
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f00000004c0))
openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x20a000, 0x0)
ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000d80)="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")
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/sequencer2\x00', 0x40042, 0x0)
sendto$inet(r0, &(0x7f00000000c0)="8dec431bb44aff53a310b4eabef65b9ca28574570c8753d962784ce7563c1f448215fd237bf4c9159a98e9205a38a1fef116825d2a67dccc355557378e26b4e71c9ead8245ce8f8727e4d5e348d6b048462955248e97e362bb149adcd5ad849873b82111c2ecfa383140f9d4c99f525041a886277a6592dbc6b9108911e88a440b93f5c0fae544676b44a19bf06aa255a549db9cb0a9221a90f33fec43b1d074bf", 0xa1, 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f00000008c0)='fou\x00')
sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000580)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="000028bd7000fddbdf250200080001004e230000"], 0x1}, 0x1, 0x0, 0x0, 0x20044000}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="3b141f0e9d0c49e20700000019fa30a0970000c45d6c2b44e6"], 0x1}, 0x1, 0x0, 0x0, 0x8050}, 0x40)
r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25d1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$session_to_parent(0x12)
ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x4000000000000200)
dup2(r4, r3)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0xc81, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0xfffffffffffffffd, 0x40100)
getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000300)={0x0, @remote, @loopback}, &(0x7f0000000340)=0xc)
sendmsg$nl_route(r6, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="0000010000000030e1d035b385af2a8b4c5191dd88977cdbf35dfd153e455765394e223dbbc577e9f4fbb7665eba75dbcacc22b7e7000000000000921e0e81f19a0ca98748136eecea289e2b316969f629926144842f2a9913939dca8e9d8b223095277cff58b584a817ed8ff21487fec88ddaa729b271f62e079a7095f8a86f21e9e88f863824dfb132d07c6ed4a01350a1319aa0107005000000780b21c1249aecaa640d9112b0ce73c70ea9b449312e2c064c0c4ef1a7cdb0ede245031821a052eac0e620e884c20fb82cacb887c7dffaec1ee2f0f8cfb7b670e46912624ffc0b32cc1ac16ff3e3c1b4e0d4305e1297edf0d2f11a5a27d655c1481b041cf19ddab35f9ed10a4376e25c62ecede9c8ae8c6110f3ac3f02e370e1813e21acbf28c0f706a0fb44c209f3cbcbd46ce88ef1d0e414cff124012fa5c49dced66d1ce973f4a30c9502578540d089ed65d6d45dc8aeed937303002a24bc2d3cf43a9d23a66b44b5fcdb06b1509c41e6e363c454315c422815b874e112c3eda2bcce1068c8b70e9cb281f9c44692a7cf54adb964ae9999fdeb80936d0000000000000000000000ee7af9f4db87e50c97c7124ec730dbf1749aaf643feb04373a055976f197ceaaba7de4637a2cd469ce8f3715c5f15431532a9ad0e1e691499ab023c104c9b61d6103fe795f1866003c939194ad0ecb2ae7d3a97e19632fe69874ae26ff5335ef4fa0f8c3861424548537a3e90bb2ae51d1bd33e4d835bedf205a511bfb218b6b2c4a2648e779a9040592cbd380b269ceb8cc5f948bd796a76e85149b37a9d3fc4f0301382c9956a7d1ee9f2997398cb938950d3b06f94728087f1adddf5a37e99b837f673bcab694adc3194bbf006fe946ed7b6cab4ae8f26911aa5703e39928fa3f73860dac0cc430506919cf08a7818a8affe3268456bb1898f33bb1ec57d48971a5265fbdf7bbe3e2893e36d8fa1bf4e7ffa4b722a95d0a7d05f89c85c4e8df212873482038f2d4b00acdf20160e3eb1a0bdd30e54378438996938d4f463718691e3c0953e346d349fafce01b88ca403d27a5392a08e69cadf85397423bf1cfdf4a1c09d32d000000000000bbf4741232b84be4c3f9e0624e51588085d8dbb652ae120bafa57846fd9aed56df690995ecaf0322c6b3b6a71079bbf7b863602245cb214025b4b5ccc66e9414f25b66575585c4eb364e68bc9cd7d6f39a68a54af8"], 0x1}}, 0x4008000)
ioctl$sock_proto_private(r5, 0x80089ec, &(0x7f0000000140)="039625617620978a4df541244054545eefb285b44d2198c37642636f3bd6084339c6e79154e7a4e1e8a3a316d5a4d756fa828508c3eaae4df2759d4d16de576413772f248c74aae160e44749d604a7af5290efc74ba837ec71ff4bfb5f9a2d51403ecc6b5a4bb2dab710e3367549b45cd0b3fed1c251372400872f340ee3b348964d022f3224519d06adad720a5650c9b04292955ae6fd364adebee641bc911bcdd907f409e8200d95b946789c69b1d8876c")
r7 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0xff, 0x80000)
syz_open_dev$sndtimer(&(0x7f0000000380)='/dev/snd/timer\x00', 0x0, 0x4080)
ioctl$VT_GETMODE(r7, 0x5601, &(0x7f0000000240))
setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000000)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108)

13:24:43 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x3000)

13:24:43 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:43 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380))
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
finit_module(r1, &(0x7f0000000040)='\x00', 0x1)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x8000, 0x0)
ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000000140))

13:24:43 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

13:24:44 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x6, 0x7fffffff)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x141080, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000480)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'})
ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000680)={0x1, 0x1, [0xfff, 0x101, 0x3ff, 0x40, 0x0, 0xfffffffffffffffb, 0x8, 0x4f]})
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f00000004c0))
openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x20a000, 0x0)
ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000d80)="e2da5cdea423495c8b5663b2d9e462f4e65c25cc8b2ba5e1349cd9ae758d94c045f53f48860fd0b3d8013a69034f6ac0d6e1e98dfe38d2d9e2e2c54d473c67bfa22bbf07fadb6002cda4dd466bf8b4ac1fd7837039b702c7d0fa204a8e5df87c3de67d40844e3ddd3c120aee61b90f3b98210922d8d4271c6df39457ffa88a8a1c33837414408c58e56e3fc11ec40ec466928864d45fe30bbdca4189941c975bc6fe8fb0e6bf8e2a58131d1b5d088066c68b8a6ee0c4e1fea78983de57627ebf6f449a310f966c64391d936f99802fb9320ae1cc42997d1c5b39aa63619766cdd7c49de2caa9ca8f32bfdf837965e855c845ae541a482d0d536da37077d0660716a372e9b88473775a174c88e076f65cbd2eb057abcda6cf1f0defae4ae5d834cd4650b5e9a63e181e8d76a19d25351248870ba9a9d07a9caa02095e6471c8e479414fb098265dc0876772cecdad16beea0506c77b35df5eb725d3bd3adc681bc08ea9df3762b58b4e3daf2ac07ec27d57fad4d05925f4091b4f870f447f4f8902205e086405dad220b29478b578bb0baa2cc68a087ca211d2f5fe6098ca2d3e4e6a642125a9cb62d6754c84a182a5d29c2a8917716b63f5f43573ef15622a32e6f1bcba3d7f6200da9a82de84dc95ee8f2b0f88d20593a6a03e")
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/sequencer2\x00', 0x40042, 0x0)
sendto$inet(r0, &(0x7f00000000c0)="8dec431bb44aff53a310b4eabef65b9ca28574570c8753d962784ce7563c1f448215fd237bf4c9159a98e9205a38a1fef116825d2a67dccc355557378e26b4e71c9ead8245ce8f8727e4d5e348d6b048462955248e97e362bb149adcd5ad849873b82111c2ecfa383140f9d4c99f525041a886277a6592dbc6b9108911e88a440b93f5c0fae544676b44a19bf06aa255a549db9cb0a9221a90f33fec43b1d074bf", 0xa1, 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f00000008c0)='fou\x00')
sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000580)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="000028bd7000fddbdf250200080001004e230000"], 0x1}, 0x1, 0x0, 0x0, 0x20044000}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="3b141f0e9d0c49e20700000019fa30a0970000c45d6c2b44e6"], 0x1}, 0x1, 0x0, 0x0, 0x8050}, 0x40)
r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25d1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$session_to_parent(0x12)
ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x4000000000000200)
dup2(r4, r3)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0xc81, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0xfffffffffffffffd, 0x40100)
getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000300)={0x0, @remote, @loopback}, &(0x7f0000000340)=0xc)
sendmsg$nl_route(r6, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4008000)
ioctl$sock_proto_private(r5, 0x80089ec, &(0x7f0000000140)="039625617620978a4df541244054545eefb285b44d2198c37642636f3bd6084339c6e79154e7a4e1e8a3a316d5a4d756fa828508c3eaae4df2759d4d16de576413772f248c74aae160e44749d604a7af5290efc74ba837ec71ff4bfb5f9a2d51403ecc6b5a4bb2dab710e3367549b45cd0b3fed1c251372400872f340ee3b348964d022f3224519d06adad720a5650c9b04292955ae6fd364adebee641bc911bcdd907f409e8200d95b946789c69b1d8876c")
r7 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0xff, 0x80000)
syz_open_dev$sndtimer(&(0x7f0000000380)='/dev/snd/timer\x00', 0x0, 0x4080)
ioctl$VT_GETMODE(r7, 0x5601, &(0x7f0000000240))
setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000000)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108)

13:24:44 executing program 1:
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
add_key$keyring(0x0, &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)
add_key(0x0, &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000001a80)="b7feb58638d4bf8dfafcdf7772f14b127341adba280fd79cc810085b0ac4a6bfbb03a22eb9a4958ee8a0", 0x2a, 0xfffffffffffffff8)
getegid()
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000200)=ANY=[])
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = timerfd_create(0x0, 0x80800)
timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/249, 0xf9}], 0x1)
unshare(0x20600)
prctl$PR_CAPBSET_READ(0x17, 0x0)
r1 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x5, 0x8c000)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000640)=[@in6={0xa, 0x0, 0x7, @mcast1}, @in={0x2, 0x4e20, @rand_addr=0x9}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, @in={0x2, 0x4e21, @loopback}], 0x3f3)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000340)=@assoc_value, 0x8)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00')
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x101, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')

13:24:44 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0xe0fe)

13:24:44 executing program 5:
socket$netlink(0x10, 0x3, 0x2000)
set_mempolicy(0x4002, &(0x7f0000000140)=0x6, 0x9)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000400), 0x4)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xbbd, 0x0, 0x2, 0x100, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x59, 0xe75d, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x442e, 0x40040)
ioctl$KVM_RUN(r0, 0xae80, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x18}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x200, 0x70bd29, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x2000c091)
syz_genetlink_get_family_id$nbd(&(0x7f0000000500)='nbd\x00')
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="004800000000000000000000000000000000000000000000008c3abed8b13cdb84f9e2574eef53869bb4886dee91a1fb8d6929e6c84b8c82b50cb7c0b5e4016437dd"], 0x1}, 0x1, 0x0, 0x0, 0x20004000}, 0x50)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet(0x2, 0x2, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, &(0x7f0000000540))
setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x0, 'bridge_slave_0\x00', 0x3}, 0x18)
getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000a00), 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000680)='/dev/loop#\x00', 0x4, 0x800000000105082)
r5 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, 0x0, 0x0)
pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r4, 0x0, 0x102000000)

13:24:44 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x80ffff)

13:24:44 executing program 1:
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
add_key$keyring(0x0, &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)
add_key(0x0, &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000001a80)="b7feb58638d4bf8dfafcdf7772f14b127341adba280fd79cc810085b0ac4a6bfbb03a22eb9a4958ee8a0", 0x2a, 0xfffffffffffffff8)
getegid()
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000200)=ANY=[])
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = timerfd_create(0x0, 0x80800)
timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/249, 0xf9}], 0x1)
unshare(0x20600)
prctl$PR_CAPBSET_READ(0x17, 0x0)
r1 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x5, 0x8c000)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000640)=[@in6={0xa, 0x0, 0x7, @mcast1}, @in={0x2, 0x4e20, @rand_addr=0x9}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, @in={0x2, 0x4e21, @loopback}], 0x3f3)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000340)=@assoc_value, 0x8)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00')
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x101, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)

[ 2833.966976][T32062] page:ffffea00022c1cc0 count:0 mapcount:0 mapping:0000000000000000 index:0x0
[ 2833.976574][T32062] flags: 0x1fffc0000000000()
[ 2834.007802][T32062] raw: 01fffc0000000000 dead000000000100 dead000000000200 0000000000000000
[ 2834.032055][T32062] raw: 0000000000000000 ffff8880988dc948 00000001fffff9ff ffff88805bf08840
13:24:44 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x1000000)

[ 2834.062191][T32062] page dumped because: VM_BUG_ON_PAGE(page_ref_count(page) == 0)
[ 2834.078346][T32062] page->mem_cgroup:ffff88805bf08840
[ 2834.096546][T32062] ------------[ cut here ]------------
[ 2834.102030][T32062] kernel BUG at include/linux/mm.h:579!
[ 2834.125831][T32062] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[ 2834.126824][T32170] kobject: 'loop0' (00000000a6756664): kobject_uevent_env: uevent_suppress caused the event to drop!
[ 2834.131915][T32062] CPU: 1 PID: 32062 Comm: syz-executor.5 Not tainted 5.0.0-rc7-next-20190225 #42
[ 2834.131923][T32062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2834.131948][T32062] RIP: 0010:generic_pipe_buf_release+0x120/0x160
[ 2834.131961][T32062] Code: bd ff 4c 89 e7 e8 60 44 db ff e8 db 28 bd ff 5b 41 5c 41 5d 5d c3 e8 cf 28 bd ff 48 c7 c6 e0 98 75 87 4c 89 e7 e8 90 dc e4 ff <0f> 0b e8 b9 28 bd ff 4d 8d 65 ff e9 3d ff ff ff 48 89 df e8 58 f9
[ 2834.131968][T32062] RSP: 0018:ffff88805395f920 EFLAGS: 00010216
[ 2834.131979][T32062] RAX: 0000000000040000 RBX: ffffea00022c1cf4 RCX: ffffc90010878000
[ 2834.131987][T32062] RDX: 000000000003a573 RSI: ffffffff81982c42 RDI: ffffed100a72bf08
[ 2834.131995][T32062] RBP: ffff88805395f938 R08: 0000000000000021 R09: ffffed1015d25011
13:24:44 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000040)={0x8001005})

13:24:44 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

[ 2834.132003][T32062] R10: ffffed1015d25010 R11: ffff8880ae928087 R12: ffffea00022c1cc0
[ 2834.132011][T32062] R13: 0000000000000000 R14: ffff88808564c000 R15: ffff88804fc3e000
[ 2834.132022][T32062] FS:  00007f3838040700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000
[ 2834.132030][T32062] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2834.132039][T32062] CR2: 00007fd214b55db8 CR3: 0000000099f27000 CR4: 00000000001426e0
[ 2834.132050][T32062] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 2834.132058][T32062] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
13:24:45 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0xfe69)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000013)

[ 2834.132062][T32062] Call Trace:
[ 2834.132081][T32062]  iter_file_splice_write+0x7d1/0xbe0
[ 2834.132096][T32062]  ? atime_needs_update+0x5f0/0x5f0
[ 2834.132116][T32062]  ? page_cache_pipe_buf_confirm+0x2b0/0x2b0
[ 2834.132142][T32062]  ? rw_verify_area+0x118/0x360
[ 2834.132160][T32062]  ? page_cache_pipe_buf_confirm+0x2b0/0x2b0
[ 2834.132175][T32062]  direct_splice_actor+0x126/0x1a0
[ 2834.132190][T32062]  splice_direct_to_actor+0x369/0x970
[ 2834.132204][T32062]  ? generic_pipe_buf_nosteal+0x10/0x10
[ 2834.132227][T32062]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2834.152798][T32170] kobject: 'holders' (00000000dcfd3903): kobject_add_internal: parent: 'loop0', set: '<NULL>'
[ 2834.162179][T32062]  ? do_splice_to+0x190/0x190
[ 2834.162198][T32062]  ? rw_verify_area+0x118/0x360
[ 2834.162213][T32062]  do_splice_direct+0x1da/0x2a0
[ 2834.162227][T32062]  ? splice_direct_to_actor+0x970/0x970
[ 2834.162250][T32062]  do_sendfile+0x597/0xd00
[ 2834.162270][T32062]  ? do_compat_pwritev64+0x1c0/0x1c0
[ 2834.162286][T32062]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 2834.162373][T32062]  ? put_timespec64+0xda/0x140
[ 2834.171065][T32170] kobject: 'slaves' (00000000f39fe464): kobject_add_internal: parent: 'loop0', set: '<NULL>'
[ 2834.188213][T32062]  __x64_sys_sendfile64+0x1dd/0x220
[ 2834.188229][T32062]  ? __ia32_sys_sendfile+0x230/0x230
[ 2834.188243][T32062]  ? do_syscall_64+0x26/0x610
[ 2834.188258][T32062]  ? lockdep_hardirqs_on+0x418/0x5d0
[ 2834.188273][T32062]  ? trace_hardirqs_on+0x67/0x230
[ 2834.188287][T32062]  do_syscall_64+0x103/0x610
[ 2834.188302][T32062]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2834.188310][T32062] RIP: 0033:0x457e29
[ 2834.188322][T32062] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2834.188329][T32062] RSP: 002b:00007f383803fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2834.188341][T32062] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29
[ 2834.188348][T32062] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006
[ 2834.188355][T32062] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 2834.188363][T32062] R10: 0000000102000000 R11: 0000000000000246 R12: 00007f38380406d4
[ 2834.188369][T32062] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 00000000ffffffff
[ 2834.188379][T32062] Modules linked in:
[ 2834.209430][T32062] ---[ end trace ca4f519156b7b4f1 ]---
[ 2834.219081][T32170] kobject: 'loop0' (00000000a6756664): kobject_uevent_env
[ 2834.227792][T32062] RIP: 0010:generic_pipe_buf_release+0x120/0x160
[ 2834.238495][T32170] kobject: 'loop0' (00000000a6756664): fill_kobj_path: path = '/devices/virtual/block/loop0'
[ 2834.244525][T32062] Code: bd ff 4c 89 e7 e8 60 44 db ff e8 db 28 bd ff 5b 41 5c 41 5d 5d c3 e8 cf 28 bd ff 48 c7 c6 e0 98 75 87 4c 89 e7 e8 90 dc e4 ff <0f> 0b e8 b9 28 bd ff 4d 8d 65 ff e9 3d ff ff ff 48 89 df e8 58 f9
[ 2834.258234][T32170] kobject: 'queue' (0000000007e3a3be): kobject_add_internal: parent: 'loop0', set: '<NULL>'
[ 2834.259673][T32062] RSP: 0018:ffff88805395f920 EFLAGS: 00010216
[ 2834.280809][T32170] kobject: 'mq' (000000006f345142): kobject_add_internal: parent: 'loop0', set: '<NULL>'
[ 2834.288226][T32062] RAX: 0000000000040000 RBX: ffffea00022c1cf4 RCX: ffffc90010878000
[ 2834.296693][T32170] kobject: 'mq' (000000006f345142): kobject_uevent_env
[ 2834.300178][T32062] RDX: 000000000003a573 RSI: ffffffff81982c42 RDI: ffffed100a72bf08
[ 2834.308964][T32170] kobject: 'mq' (000000006f345142): kobject_uevent_env: filter function caused the event to drop!
[ 2834.331524][T32062] RBP: ffff88805395f938 R08: 0000000000000021 R09: ffffed1015d25011
[ 2834.342694][T32170] kobject: '0' (00000000496368aa): kobject_add_internal: parent: 'mq', set: '<NULL>'
[ 2834.349181][T32062] R10: ffffed1015d25010 R11: ffff8880ae928087 R12: ffffea00022c1cc0
[ 2834.356625][T32170] kobject: 'cpu0' (00000000dd2ea714): kobject_add_internal: parent: '0', set: '<NULL>'
[ 2834.359988][T32062] R13: 0000000000000000 R14: ffff88808564c000 R15: ffff88804fc3e000
[ 2834.365802][T32170] kobject: 'cpu1' (0000000071bb93cb): kobject_add_internal: parent: '0', set: '<NULL>'
[ 2834.369723][T32062] FS:  00007f3838040700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000
[ 2834.388955][T32170] kobject: 'queue' (0000000007e3a3be): kobject_uevent_env
[ 2834.390984][T32062] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2834.398095][T32170] kobject: 'queue' (0000000007e3a3be): kobject_uevent_env: filter function caused the event to drop!
[ 2834.402561][T32062] CR2: 00007f3f86e1ba20 CR3: 0000000099f27000 CR4: 00000000001426e0
[ 2834.402651][T32062] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 2834.402698][T32062] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 2834.402718][T32062] Kernel panic - not syncing: Fatal exception
[ 2834.403967][T32062] Kernel Offset: disabled
[ 2834.732192][T32062] Rebooting in 86400 seconds..