[   57.663052][   T25] audit: type=1800 audit(1555064856.531:21): pid=8896 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2419 res=0
[   57.696983][   T25] audit: type=1800 audit(1555064856.531:22): pid=8896 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2447 res=0
[   57.723586][   T25] audit: type=1800 audit(1555064856.541:23): pid=8896 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rsyslog" dev="sda1" ino=2442 res=0
[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.0.15' (ECDSA) to the list of known hosts.
2019/04/12 10:27:47 fuzzer started
2019/04/12 10:27:51 dialing manager at 10.128.0.26:43643
2019/04/12 10:27:51 syscalls: 2408
2019/04/12 10:27:51 code coverage: enabled
2019/04/12 10:27:51 comparison tracing: enabled
2019/04/12 10:27:51 extra coverage: extra coverage is not supported by the kernel
2019/04/12 10:27:51 setuid sandbox: enabled
2019/04/12 10:27:51 namespace sandbox: enabled
2019/04/12 10:27:51 Android sandbox: /sys/fs/selinux/policy does not exist
2019/04/12 10:27:51 fault injection: enabled
2019/04/12 10:27:51 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/04/12 10:27:51 net packet injection: enabled
2019/04/12 10:27:51 net device setup: enabled
10:28:46 executing program 0:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x7b}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00')
preadv(r0, &(0x7f0000000700), 0xdd, 0x0)

syzkaller login: [  127.619547][ T9060] IPVS: ftp: loaded support on port[0] = 21
10:28:46 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00fb1505007b9eec"], 0x1, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffebc)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  127.705390][ T9060] chnl_net:caif_netlink_parms(): no params data found
[  127.764452][ T9060] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.777552][ T9060] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.785362][ T9060] device bridge_slave_0 entered promiscuous mode
[  127.804663][ T9063] IPVS: ftp: loaded support on port[0] = 21
[  127.811465][ T9060] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.819096][ T9060] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.826896][ T9060] device bridge_slave_1 entered promiscuous mode
[  127.845003][ T9060] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  127.857285][ T9060] bond0: Enslaving bond_slave_1 as an active interface with an up link
10:28:46 executing program 2:
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x3, 0x0)
r0 = gettid()
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000001280)={0x0, 0x4000000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000001240))
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x3e, 0x0)
tkill(r0, 0x1000000000016)

[  127.899792][ T9060] team0: Port device team_slave_0 added
[  127.906718][ T9060] team0: Port device team_slave_1 added
[  127.999540][ T9060] device hsr_slave_0 entered promiscuous mode
[  128.037796][ T9060] device hsr_slave_1 entered promiscuous mode
10:28:46 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
close(r0)

[  128.175476][ T9066] IPVS: ftp: loaded support on port[0] = 21
[  128.177587][ T9063] chnl_net:caif_netlink_parms(): no params data found
[  128.215370][ T9068] IPVS: ftp: loaded support on port[0] = 21
[  128.250269][ T9063] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.258341][ T9063] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.266105][ T9063] device bridge_slave_0 entered promiscuous mode
[  128.283596][ T9060] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.290726][ T9060] bridge0: port 2(bridge_slave_1) entered forwarding state
10:28:47 executing program 4:
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@in={0x2, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0)
request_key(0x0, 0x0, 0x0, 0xffffffffffffffff)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)
ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, 0x0)

[  128.298140][ T9060] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.305173][ T9060] bridge0: port 1(bridge_slave_0) entered forwarding state
[  128.319177][ T9063] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.326244][ T9063] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.339443][ T9063] device bridge_slave_1 entered promiscuous mode
[  128.431267][ T9063] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  128.476312][ T9063] bond0: Enslaving bond_slave_1 as an active interface with an up link
10:28:47 executing program 5:
r0 = syz_open_dev$swradio(&(0x7f00000002c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$UI_SET_PHYS(r0, 0x4008556c, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, 0x0)
r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x5, 0x0)
semctl$GETPID(0x0, 0x0, 0xb, &(0x7f0000000080)=""/20)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22}}, 0x0, 0x82b5}, 0x0)
semctl$IPC_RMID(0x0, 0x0, 0x0)
openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$void(r1, 0xc0045878)
ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000380)={[0x0, 0x4, 0x2001], 0x0, 0xd8, 0x7})
shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000540)=""/32)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000240)={0x6}, 0x0, 0x8)

[  128.561880][ T9073] IPVS: ftp: loaded support on port[0] = 21
[  128.571712][ T9060] 8021q: adding VLAN 0 to HW filter on device bond0
[  128.600366][ T9068] chnl_net:caif_netlink_parms(): no params data found
[  128.625070][ T9060] 8021q: adding VLAN 0 to HW filter on device team0
[  128.634029][ T9063] team0: Port device team_slave_0 added
[  128.643892][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  128.657792][ T2988] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.668892][ T2988] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.676508][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  128.697542][ T9063] team0: Port device team_slave_1 added
[  128.716315][ T9066] chnl_net:caif_netlink_parms(): no params data found
[  128.809502][ T9063] device hsr_slave_0 entered promiscuous mode
[  128.867828][ T9063] device hsr_slave_1 entered promiscuous mode
[  128.907856][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  128.917039][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  128.926548][ T9075] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.935005][ T9075] bridge0: port 1(bridge_slave_0) entered forwarding state
[  128.944606][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  128.953198][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  128.961910][ T9075] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.969007][ T9075] bridge0: port 2(bridge_slave_1) entered forwarding state
[  128.976532][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  128.985088][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  128.996693][ T9076] IPVS: ftp: loaded support on port[0] = 21
[  129.000279][ T9060] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  129.013460][ T9060] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  129.025005][ T9068] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.033260][ T9068] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.041058][ T9068] device bridge_slave_0 entered promiscuous mode
[  129.079313][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  129.088063][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  129.096763][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  129.105433][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  129.113700][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  129.122009][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  129.130497][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  129.138778][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  129.146906][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  129.156080][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  129.164054][ T9068] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.171192][ T9068] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.179040][ T9068] device bridge_slave_1 entered promiscuous mode
[  129.203265][ T9068] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  129.212409][ T9073] chnl_net:caif_netlink_parms(): no params data found
[  129.230521][ T9068] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  129.260257][ T9066] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.267398][ T9066] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.275910][ T9066] device bridge_slave_0 entered promiscuous mode
[  129.284549][ T9066] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.292207][ T9066] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.300481][ T9066] device bridge_slave_1 entered promiscuous mode
[  129.309276][ T9068] team0: Port device team_slave_0 added
[  129.318932][ T9068] team0: Port device team_slave_1 added
[  129.389189][ T9068] device hsr_slave_0 entered promiscuous mode
[  129.427881][ T9068] device hsr_slave_1 entered promiscuous mode
[  129.492587][ T9073] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.499779][ T9073] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.507590][ T9073] device bridge_slave_0 entered promiscuous mode
[  129.514891][ T9073] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.522009][ T9073] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.529641][ T9073] device bridge_slave_1 entered promiscuous mode
[  129.543638][ T9066] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  129.568963][ T9066] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  129.586476][ T9060] 8021q: adding VLAN 0 to HW filter on device batadv0
[  129.604247][ T9073] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  129.616700][ T9073] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  129.631357][ T9063] 8021q: adding VLAN 0 to HW filter on device bond0
[  129.644720][ T9066] team0: Port device team_slave_0 added
[  129.656309][ T9068] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.663444][ T9068] bridge0: port 2(bridge_slave_1) entered forwarding state
[  129.670766][ T9068] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.677849][ T9068] bridge0: port 1(bridge_slave_0) entered forwarding state
[  129.692977][ T2988] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.701038][ T2988] bridge0: port 2(bridge_slave_1) entered disabled state
10:28:48 executing program 0:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x7b}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00')
preadv(r0, &(0x7f0000000700), 0xdd, 0x0)

[  129.735164][ T9066] team0: Port device team_slave_1 added
10:28:48 executing program 0:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x7b}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00')
preadv(r0, &(0x7f0000000700), 0xdd, 0x0)

[  129.785980][ T9073] team0: Port device team_slave_0 added
[  129.793386][ T9073] team0: Port device team_slave_1 added
[  129.814287][ T9063] 8021q: adding VLAN 0 to HW filter on device team0
10:28:48 executing program 0:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x7b}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00')
preadv(r0, &(0x7f0000000700), 0xdd, 0x0)

10:28:48 executing program 0:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x7b}], 0x1, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000700), 0xdd, 0x0)

10:28:48 executing program 0:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x7b}], 0x1, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000700), 0xdd, 0x0)

[  129.869685][ T9073] device hsr_slave_0 entered promiscuous mode
[  129.909110][ T9073] device hsr_slave_1 entered promiscuous mode
10:28:48 executing program 0:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x7b}], 0x1, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000700), 0xdd, 0x0)

10:28:48 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00')
preadv(r0, &(0x7f0000000700), 0xdd, 0x0)

[  129.979824][ T9066] device hsr_slave_0 entered promiscuous mode
[  130.007841][ T9066] device hsr_slave_1 entered promiscuous mode
[  130.048523][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  130.056152][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  130.065724][ T9076] chnl_net:caif_netlink_parms(): no params data found
[  130.086767][ T9063] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  130.097892][ T9063] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  130.121473][ T9068] 8021q: adding VLAN 0 to HW filter on device bond0
[  130.132276][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  130.142197][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  130.150517][ T9075] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.157593][ T9075] bridge0: port 1(bridge_slave_0) entered forwarding state
[  130.165263][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  130.174081][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  130.182519][ T9075] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.189589][ T9075] bridge0: port 2(bridge_slave_1) entered forwarding state
[  130.197059][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  130.205896][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  130.214532][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  130.223173][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  130.231626][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  130.240348][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  130.248798][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  130.256904][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  130.265236][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  130.273643][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  130.285508][ T9063] 8021q: adding VLAN 0 to HW filter on device batadv0
[  130.301046][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  130.309970][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  130.317937][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  130.352352][ T9068] 8021q: adding VLAN 0 to HW filter on device team0
[  130.369609][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  130.381937][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  130.390669][ T9108] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details.
[  130.425514][ T9066] 8021q: adding VLAN 0 to HW filter on device bond0
[  130.450315][ T9076] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.457755][ T9076] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.465579][ T9076] device bridge_slave_0 entered promiscuous mode
[  130.494279][ T9073] 8021q: adding VLAN 0 to HW filter on device bond0
[  130.508449][ T9066] 8021q: adding VLAN 0 to HW filter on device team0
[  130.518861][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  130.527333][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  130.535690][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.542765][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[  130.550567][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  130.559165][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  130.567359][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.574432][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[  130.582232][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  130.589945][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  130.597605][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  130.606082][ T9076] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.616909][ T9076] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.624846][ T9076] device bridge_slave_1 entered promiscuous mode
10:28:49 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
getsockopt$sock_buf(r1, 0x1, 0x1e, &(0x7f0000000240)=""/4096, &(0x7f0000000040)=0x1000)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000700)={0x0, 0xa000})
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe7a)
ioctl$KVM_NMI(r3, 0xae9a)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[  130.658923][ T9076] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  130.680703][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  130.689328][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  130.698343][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  130.708578][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  130.717079][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  130.732709][ T3481] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.739862][ T3481] bridge0: port 1(bridge_slave_0) entered forwarding state
[  130.747450][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  130.755841][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  130.764286][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  130.772813][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  130.781171][ T3481] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.788285][ T3481] bridge0: port 2(bridge_slave_1) entered forwarding state
[  130.795991][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  130.806772][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  130.815408][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  130.824411][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  130.832408][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  130.842941][ T9076] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  130.855056][ T9073] 8021q: adding VLAN 0 to HW filter on device team0
[  130.869697][ T9068] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  130.883603][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  130.892335][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  130.901080][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  130.912654][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  130.925274][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  130.936005][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  130.945497][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  130.955505][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  130.964298][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  130.982235][ T9066] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  130.993591][ T9066] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  131.011376][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  131.020214][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  131.028610][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  131.036786][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  131.045294][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  131.053793][ T9075] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.060901][ T9075] bridge0: port 1(bridge_slave_0) entered forwarding state
[  131.068733][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  131.076977][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  131.085183][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  131.093620][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  131.101931][ T9075] bridge0: port 2(bridge_slave_1) entered blocking state
[  131.109002][ T9075] bridge0: port 2(bridge_slave_1) entered forwarding state
[  131.117000][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  131.125325][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  131.134087][ T9076] team0: Port device team_slave_0 added
[  131.143409][ T9076] team0: Port device team_slave_1 added
[  131.155138][ T9066] 8021q: adding VLAN 0 to HW filter on device batadv0
[  131.177182][ T9068] 8021q: adding VLAN 0 to HW filter on device batadv0
[  131.196443][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  131.205198][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  131.214126][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  131.224118][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  131.232606][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  131.246662][ T9073] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  131.257317][ T9073] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  131.293308][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  131.302269][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  131.311520][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  131.319916][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  131.328437][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  131.339260][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  131.348683][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  131.365429][ T9073] 8021q: adding VLAN 0 to HW filter on device batadv0
10:28:50 executing program 2:
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0xe)
wait4(0x0, 0x0, 0x0, 0x0)

10:28:50 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00')
preadv(r0, &(0x7f0000000700), 0xdd, 0x0)

[  131.419899][ T9076] device hsr_slave_0 entered promiscuous mode
[  131.472149][ T9076] device hsr_slave_1 entered promiscuous mode
[  131.479370][ T9133] tmpfs: No value for mount option '¨6Š›ø]cše!­?šôeéòcÎZ%š'
[  131.560572][ T9076] 8021q: adding VLAN 0 to HW filter on device bond0
[  131.584198][    C0] hrtimer: interrupt took 26138 ns
[  131.592509][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  131.600942][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  131.613638][ T9076] 8021q: adding VLAN 0 to HW filter on device team0
[  131.625111][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  131.636830][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  131.646077][ T3481] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.653181][ T3481] bridge0: port 1(bridge_slave_0) entered forwarding state
10:28:50 executing program 4:
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@in={0x2, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0)
request_key(0x0, 0x0, 0x0, 0xffffffffffffffff)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)
ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, 0x0)

[  131.676862][ T9076] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  131.690472][ T9076] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  131.703413][ T9069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  131.716751][ T9069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  131.735641][ T9069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  131.747544][ T9069] bridge0: port 2(bridge_slave_1) entered blocking state
[  131.754920][ T9069] bridge0: port 2(bridge_slave_1) entered forwarding state
[  131.765734][ T9069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  131.774574][ T9069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  131.786246][ T9069] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  131.795171][ T9069] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  131.808495][ T9069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  131.816957][ T9069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  131.825747][ T9069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
10:28:50 executing program 5:
clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f2cffffff319bc070")
r1 = getpid()
rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000))
ptrace(0x10, r1)
ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000002180)={0x0, 0xfcf0})

10:28:50 executing program 1:
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)

10:28:50 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
close(r0)

10:28:50 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00')
preadv(r0, &(0x7f0000000700), 0xdd, 0x0)

10:28:50 executing program 4:
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@in={0x2, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0)
request_key(0x0, 0x0, 0x0, 0xffffffffffffffff)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)
ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, 0x0)

[  131.833604][ T9069] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  131.856316][ T9076] 8021q: adding VLAN 0 to HW filter on device batadv0
10:28:50 executing program 1:
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)

10:28:50 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket(0x1e, 0x0, 0x0)
msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000100)=""/146)

10:28:50 executing program 0:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00')
preadv(r0, &(0x7f0000000700), 0xdd, 0x0)

10:28:50 executing program 3:
syz_emit_ethernet(0x6e, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x543]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x5, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x29, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0)

10:28:53 executing program 2:
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0xe)
wait4(0x0, 0x0, 0x0, 0x0)

10:28:53 executing program 0:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00')
preadv(r0, &(0x7f0000000700), 0xdd, 0x0)

10:28:53 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000100)=""/146)

10:28:53 executing program 1:
seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0xffffffff}]})
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = open(&(0x7f00004b8ff8)='./file1\x00', 0x28042, 0x0)
sendfile(r1, r2, 0x0, 0x0)

10:28:53 executing program 4:
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@in={0x2, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0)
request_key(0x0, 0x0, 0x0, 0xffffffffffffffff)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)
ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, 0x0)

10:28:53 executing program 5:
clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f2cffffff319bc070")
r1 = getpid()
rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000))
ptrace(0x10, r1)
ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000002180)={0x0, 0xfcf0})

10:28:53 executing program 0:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00')
preadv(r0, &(0x7f0000000700), 0xdd, 0x0)

[  134.508179][   T25] kauditd_printk_skb: 7 callbacks suppressed
[  134.508191][   T25] audit: type=1326 audit(1555064933.381:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9198 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ba8a code=0xffff0000
[  134.516403][ T9205] tmpfs: No value for mount option '¨6Š›ø]cše!­?šôeéòcÎZ%š'
10:28:53 executing program 2:
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0xe)
wait4(0x0, 0x0, 0x0, 0x0)

10:28:53 executing program 3:
seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0xffffffff}]})
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58)
accept$alg(r0, 0x0, 0x0)

10:28:53 executing program 0:
preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00')
preadv(r0, &(0x7f0000000700), 0xdd, 0x0)

10:28:53 executing program 4:
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@in={0x2, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0)
request_key(0x0, 0x0, 0x0, 0xffffffffffffffff)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

[  134.632797][   T25] audit: type=1326 audit(1555064933.501:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9214 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ba8a code=0xffff0000
[  134.664529][ T9217] tmpfs: No value for mount option '¨6Š›ø]cše!­?šôeéòcÎZ%š'
10:28:53 executing program 0:
preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00')
preadv(r0, &(0x7f0000000700), 0xdd, 0x0)

10:28:53 executing program 2:
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0xe)
wait4(0x0, 0x0, 0x0, 0x0)

10:28:53 executing program 0:
preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00')
preadv(r0, &(0x7f0000000700), 0xdd, 0x0)

10:28:53 executing program 4:
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@in={0x2, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0)
request_key(0x0, 0x0, 0x0, 0xffffffffffffffff)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

[  134.770779][ T9233] tmpfs: No value for mount option '¨6Š›ø]cše!­?šôeéòcÎZ%š'
10:28:54 executing program 1:
pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100), 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
stat(&(0x7f0000000600)='./bus\x00', &(0x7f0000000980))
lstat(0x0, &(0x7f0000000bc0))
lstat(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000340))
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="a40000f85adcd416bbb11c932090363e5d62cbc967c0014b7fdbf43956c498d74d1bf7542fb643a0755e85309ddf0dff697a284d799425ba3b1ac82db0659417a6312c2ff78fb3f7cf138afb2cc08a07e863fff310"], 0x55)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
unlinkat(r1, &(0x7f0000000440)='./bus\x00', 0x200)
unlinkat(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0xfffffffffffffffd, 0x3, 0x3}, 0x0)
accept(r1, &(0x7f0000000240)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f0000000400)=0x80)
creat(&(0x7f0000000100)='./file1\x00', 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x8)

10:28:54 executing program 0:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00')
preadv(r0, &(0x7f0000000700), 0xdd, 0x0)

10:28:54 executing program 4:
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@in={0x2, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0)
request_key(0x0, 0x0, 0x0, 0xffffffffffffffff)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

10:28:54 executing program 5:
clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f2cffffff319bc070")
r1 = getpid()
rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000))
ptrace(0x10, r1)
ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000002180)={0x0, 0xfcf0})

[  135.296235][   T25] audit: type=1326 audit(1555064934.161:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9198 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ba8a code=0xffff0000
10:28:54 executing program 0:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00')
preadv(r0, &(0x7f0000000700), 0xdd, 0x0)

[  135.425294][   T25] audit: type=1326 audit(1555064934.291:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9214 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ba8a code=0xffff0000
10:28:54 executing program 3:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r2 = dup2(r1, r0)
sched_setaffinity(0x0, 0x0, 0x0)
accept4$packet(r2, 0x0, 0x0, 0x0)

10:28:54 executing program 0:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00')
preadv(r0, &(0x7f0000000700), 0xdd, 0x0)

10:28:54 executing program 0:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x7b}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
preadv(r0, &(0x7f0000000700), 0xdd, 0x0)

10:28:54 executing program 4:
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@in={0x2, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

[  135.567903][ T9262] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  135.586372][ T9262] FAT-fs (loop1): Filesystem has been set read-only
[  135.594153][ T9262] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500)
[  136.207882][ T9258] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500)
10:28:56 executing program 2:
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0xe)

10:28:56 executing program 0:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x7b}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
preadv(r0, &(0x7f0000000700), 0xdd, 0x0)

10:28:56 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000380)='/dev/snd/seq\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x9, 0x20000000000031, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f00000009c0))

10:28:56 executing program 4:
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@in={0x2, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

10:28:56 executing program 5:
clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f2cffffff319bc070")
r1 = getpid()
rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000))
ptrace(0x10, r1)
ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000002180)={0x0, 0xfcf0})

10:28:56 executing program 1:
pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100), 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
stat(&(0x7f0000000600)='./bus\x00', &(0x7f0000000980))
lstat(0x0, &(0x7f0000000bc0))
lstat(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000340))
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="a40000f85adcd416bbb11c932090363e5d62cbc967c0014b7fdbf43956c498d74d1bf7542fb643a0755e85309ddf0dff697a284d799425ba3b1ac82db0659417a6312c2ff78fb3f7cf138afb2cc08a07e863fff310"], 0x55)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
unlinkat(r1, &(0x7f0000000440)='./bus\x00', 0x200)
unlinkat(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0xfffffffffffffffd, 0x3, 0x3}, 0x0)
accept(r1, &(0x7f0000000240)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f0000000400)=0x80)
creat(&(0x7f0000000100)='./file1\x00', 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x8)

10:28:56 executing program 0:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x7b}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
preadv(r0, &(0x7f0000000700), 0xdd, 0x0)

10:28:56 executing program 0:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x7b}], 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00')
preadv(0xffffffffffffffff, &(0x7f0000000700), 0xdd, 0x0)

10:28:56 executing program 3:
pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100), 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
stat(&(0x7f0000000600)='./bus\x00', &(0x7f0000000980))
lstat(0x0, &(0x7f0000000bc0))
lstat(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000340))
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="a40000f85adcd416bbb11c932090363e5d62cbc967c0014b7fdbf43956c498d74d1bf7542fb643a0755e85309ddf0dff697a284d799425ba3b1ac82db0659417a6312c2ff78fb3f7cf138afb2cc08a07e863fff310"], 0x55)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
unlinkat(r1, &(0x7f0000000440)='./bus\x00', 0x200)
unlinkat(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0xfffffffffffffffd, 0x3, 0x3}, 0x0)
accept(r1, &(0x7f0000000240)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f0000000400)=0x80)
creat(&(0x7f0000000100)='./file1\x00', 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x8)

[  137.823857][ T9301] tmpfs: No value for mount option '¨6Š›ø]cše!­?šôeéòcÎZ%š'
10:28:56 executing program 0:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x7b}], 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00')
preadv(0xffffffffffffffff, &(0x7f0000000700), 0xdd, 0x0)

10:28:56 executing program 4:
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@in={0x2, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

10:28:56 executing program 0:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x7b}], 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00')
preadv(0xffffffffffffffff, &(0x7f0000000700), 0xdd, 0x0)

[  137.994242][ T9309] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  138.042390][ T9309] FAT-fs (loop1): Filesystem has been set read-only
[  138.085967][ T9309] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500)
[  138.128258][ T9322] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  138.147551][ T9322] FAT-fs (loop3): Filesystem has been set read-only
[  138.155443][ T9322] FAT-fs (loop3): error, invalid access to FAT (entry 0x00006500)
[  138.170069][ T9322] FAT-fs (loop3): error, invalid access to FAT (entry 0x00006500)
[  138.180237][ T9322] FAT-fs (loop3): error, invalid access to FAT (entry 0x00006500)
[  138.619941][ T9291] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500)
[  138.722094][ T9314] FAT-fs (loop3): error, invalid access to FAT (entry 0x00006500)
10:28:59 executing program 2:
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')
ptrace$setopts(0x4206, r0, 0x0, 0x0)

10:28:59 executing program 0:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x7b}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00')
preadv(r0, 0x0, 0x0, 0x0)

10:28:59 executing program 4:
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00')
request_key(0x0, 0x0, 0x0, 0xffffffffffffffff)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

10:28:59 executing program 5:
clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f2cffffff319bc070")
r1 = getpid()
rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000))
ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000002180)={0x0, 0xfcf0})

10:28:59 executing program 1:
pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100), 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
stat(&(0x7f0000000600)='./bus\x00', &(0x7f0000000980))
lstat(0x0, &(0x7f0000000bc0))
lstat(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000340))
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="a40000f85adcd416bbb11c932090363e5d62cbc967c0014b7fdbf43956c498d74d1bf7542fb643a0755e85309ddf0dff697a284d799425ba3b1ac82db0659417a6312c2ff78fb3f7cf138afb2cc08a07e863fff310"], 0x55)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
unlinkat(r1, &(0x7f0000000440)='./bus\x00', 0x200)
unlinkat(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0xfffffffffffffffd, 0x3, 0x3}, 0x0)
accept(r1, &(0x7f0000000240)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f0000000400)=0x80)
creat(&(0x7f0000000100)='./file1\x00', 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x8)

10:28:59 executing program 3:
pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100), 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
stat(&(0x7f0000000600)='./bus\x00', &(0x7f0000000980))
lstat(0x0, &(0x7f0000000bc0))
lstat(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000340))
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="a40000f85adcd416bbb11c932090363e5d62cbc967c0014b7fdbf43956c498d74d1bf7542fb643a0755e85309ddf0dff697a284d799425ba3b1ac82db0659417a6312c2ff78fb3f7cf138afb2cc08a07e863fff310"], 0x55)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
unlinkat(r1, &(0x7f0000000440)='./bus\x00', 0x200)
unlinkat(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0xfffffffffffffffd, 0x3, 0x3}, 0x0)
accept(r1, &(0x7f0000000240)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f0000000400)=0x80)
creat(&(0x7f0000000100)='./file1\x00', 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x8)

10:28:59 executing program 0:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x7b}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00')
preadv(r0, 0x0, 0x0, 0x0)

[  140.838075][ T9349] tmpfs: No value for mount option '¨6Š›ø]cše!­?šôeéòcÎZ%š'
10:28:59 executing program 4:
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00')
request_key(0x0, 0x0, 0x0, 0xffffffffffffffff)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

10:28:59 executing program 0:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x7b}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00')
preadv(r0, 0x0, 0x0, 0x0)

[  140.980199][ T9353] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  140.993078][ T9353] FAT-fs (loop3): Filesystem has been set read-only
[  141.006206][ T9353] FAT-fs (loop3): error, invalid access to FAT (entry 0x00006500)
[  141.015872][ T9353] FAT-fs (loop3): error, invalid access to FAT (entry 0x00006500)
10:28:59 executing program 4:
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00')
request_key(0x0, 0x0, 0x0, 0xffffffffffffffff)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

[  141.026706][ T9353] FAT-fs (loop3): error, invalid access to FAT (entry 0x00006500)
10:28:59 executing program 0:
pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100), 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
stat(&(0x7f0000000600)='./bus\x00', &(0x7f0000000980))
lstat(0x0, &(0x7f0000000bc0))
lstat(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000340))
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="a40000f85adcd416bbb11c932090363e5d62cbc967c0014b7fdbf43956c498d74d1bf7542fb643a0755e85309ddf0dff697a284d799425ba3b1ac82db0659417a6312c2ff78fb3f7cf138afb2cc08a07e863fff310"], 0x55)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
unlinkat(r1, &(0x7f0000000440)='./bus\x00', 0x200)
unlinkat(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0xfffffffffffffffd, 0x3, 0x3}, 0x0)
accept(r1, &(0x7f0000000240)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f0000000400)=0x80)
creat(&(0x7f0000000100)='./file1\x00', 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x8)

10:29:00 executing program 4:
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@in={0x2, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0)
request_key(0x0, 0x0, 0x0, 0xffffffffffffffff)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1fe, 0x400000000000)

[  141.615397][ T9337] FAT-fs (loop3): error, invalid access to FAT (entry 0x00006500)
[  141.678188][ T9358] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500)
[  141.686208][ T9358] FAT-fs (loop1): Filesystem has been set read-only
[  141.916612][ T9381] FAT-fs (loop0): error, invalid access to FAT (entry 0x00006500)
[  141.924995][ T9381] FAT-fs (loop0): Filesystem has been set read-only
10:29:02 executing program 2:
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
gettid()
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')

10:29:02 executing program 4:
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@in={0x2, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0)
request_key(0x0, 0x0, 0x0, 0xffffffffffffffff)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1fe, 0x400000000000)

10:29:02 executing program 5:
clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f2cffffff319bc070")
r1 = getpid()
rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000))
ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000002180)={0x0, 0xfcf0})

10:29:02 executing program 3:
seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0xffffffff}]})
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r2 = dup2(r1, r0)
accept4$packet(r2, 0x0, 0x0, 0x0)

10:29:02 executing program 1:
pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100), 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
stat(&(0x7f0000000600)='./bus\x00', &(0x7f0000000980))
lstat(0x0, &(0x7f0000000bc0))
lstat(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000340))
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="a40000f85adcd416bbb11c932090363e5d62cbc967c0014b7fdbf43956c498d74d1bf7542fb643a0755e85309ddf0dff697a284d799425ba3b1ac82db0659417a6312c2ff78fb3f7cf138afb2cc08a07e863fff310"], 0x55)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
unlinkat(r1, &(0x7f0000000440)='./bus\x00', 0x200)
unlinkat(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0xfffffffffffffffd, 0x3, 0x3}, 0x0)
accept(r1, &(0x7f0000000240)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f0000000400)=0x80)
creat(&(0x7f0000000100)='./file1\x00', 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x8)

10:29:02 executing program 0:
pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100), 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
stat(&(0x7f0000000600)='./bus\x00', &(0x7f0000000980))
lstat(0x0, &(0x7f0000000bc0))
lstat(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000340))
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="a40000f85adcd416bbb11c932090363e5d62cbc967c0014b7fdbf43956c498d74d1bf7542fb643a0755e85309ddf0dff697a284d799425ba3b1ac82db0659417a6312c2ff78fb3f7cf138afb2cc08a07e863fff310"], 0x55)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
unlinkat(r1, &(0x7f0000000440)='./bus\x00', 0x200)
unlinkat(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0xfffffffffffffffd, 0x3, 0x3}, 0x0)
accept(r1, &(0x7f0000000240)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f0000000400)=0x80)
creat(&(0x7f0000000100)='./file1\x00', 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x8)

10:29:02 executing program 2:
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')

[  143.858977][   T25] audit: type=1326 audit(1555064942.731:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9396 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ba8a code=0xffff0000
[  143.874916][ T9408] tmpfs: No value for mount option '¨6Š›ø]cše!­?šôeéòcÎZ%š'
10:29:02 executing program 4:
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@in={0x2, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0)
request_key(0x0, 0x0, 0x0, 0xffffffffffffffff)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1fe, 0x400000000000)

10:29:02 executing program 2:
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')

[  143.928814][ T9419] tmpfs: No value for mount option '¨6Š›ø]cše!­?šôeéòcÎZ%š'
[  144.012911][ T9411] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  144.043560][ T9428] tmpfs: No value for mount option '¨6Š›ø]cše!­?šôeéòcÎZ%š'
10:29:02 executing program 4:
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@in={0x2, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0)
request_key(0x0, 0x0, 0x0, 0xffffffffffffffff)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

[  144.061421][ T9411] FAT-fs (loop0): Filesystem has been set read-only
10:29:03 executing program 2:
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')

[  144.088454][ T9411] FAT-fs (loop0): error, invalid access to FAT (entry 0x00006500)
[  144.103357][ T9411] FAT-fs (loop0): error, invalid access to FAT (entry 0x00006500)
10:29:03 executing program 4:
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@in={0x2, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0)
request_key(0x0, 0x0, 0x0, 0xffffffffffffffff)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

10:29:03 executing program 2:
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')

[  144.132244][ T9411] FAT-fs (loop0): error, invalid access to FAT (entry 0x00006500)
[  144.150107][ T9436] tmpfs: No value for mount option '¨6Š›ø]cše!­?šôeéòcÎZ%š'
10:29:03 executing program 2:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')

[  144.234069][ T9442] tmpfs: No value for mount option '¨6Š›ø]cše!­?šôeéòcÎZ%š'
10:29:03 executing program 5:
clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f2cffffff319bc070")
r1 = getpid()
rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000))
ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000002180)={0x0, 0xfcf0})

[  144.648450][ T9398] FAT-fs (loop0): error, invalid access to FAT (entry 0x00006500)
10:29:03 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$binfmt_elf32(r0, 0x0, 0x0)

10:29:03 executing program 4:
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@in={0x2, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0)
request_key(0x0, 0x0, 0x0, 0xffffffffffffffff)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

10:29:03 executing program 2:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')

10:29:03 executing program 0:
pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100), 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
stat(&(0x7f0000000600)='./bus\x00', &(0x7f0000000980))
lstat(0x0, &(0x7f0000000bc0))
lstat(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000340))
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="a40000f85adcd416bbb11c932090363e5d62cbc967c0014b7fdbf43956c498d74d1bf7542fb643a0755e85309ddf0dff697a284d799425ba3b1ac82db0659417a6312c2ff78fb3f7cf138afb2cc08a07e863fff310"], 0x55)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
unlinkat(r1, &(0x7f0000000440)='./bus\x00', 0x200)
unlinkat(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0xfffffffffffffffd, 0x3, 0x3}, 0x0)
accept(r1, &(0x7f0000000240)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f0000000400)=0x80)
creat(&(0x7f0000000100)='./file1\x00', 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x8)

10:29:03 executing program 1:
pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100), 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
stat(&(0x7f0000000600)='./bus\x00', &(0x7f0000000980))
lstat(0x0, &(0x7f0000000bc0))
lstat(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000340))
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="a40000f85adcd416bbb11c932090363e5d62cbc967c0014b7fdbf43956c498d74d1bf7542fb643a0755e85309ddf0dff697a284d799425ba3b1ac82db0659417a6312c2ff78fb3f7cf138afb2cc08a07e863fff310"], 0x55)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
unlinkat(r1, &(0x7f0000000440)='./bus\x00', 0x200)
unlinkat(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0xfffffffffffffffd, 0x3, 0x3}, 0x0)
accept(r1, &(0x7f0000000240)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f0000000400)=0x80)
creat(&(0x7f0000000000)='./file0\x00', 0x8)

[  144.679026][   T25] audit: type=1326 audit(1555064943.551:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9396 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ba8a code=0xffff0000
[  144.710213][ T9412] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500)
[  144.718173][ T9412] FAT-fs (loop1): Filesystem has been set read-only
10:29:03 executing program 2:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')

10:29:03 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x20000000000031, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000000c0))

10:29:03 executing program 2:
creat(0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')

10:29:03 executing program 4:
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@in={0x2, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0)
request_key(0x0, 0x0, 0x0, 0xffffffffffffffff)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

10:29:03 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000380)='/dev/snd/seq\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x20000000000031, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000080))

[  144.972043][ T9483] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  144.980923][ T9479] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  144.980980][ T9479] FAT-fs (loop0): Filesystem has been set read-only
[  144.981281][ T9479] FAT-fs (loop0): error, invalid access to FAT (entry 0x00006500)
10:29:03 executing program 2:
creat(0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')

[  145.022482][ T9483] FAT-fs (loop1): Filesystem has been set read-only
[  145.032749][ T9483] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500)
10:29:04 executing program 5:
clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f2cffffff319bc070")
r1 = getpid()
ptrace(0x10, r1)
ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000002180)={0x0, 0xfcf0})

10:29:04 executing program 2:
creat(0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')

10:29:04 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, 0x0)

10:29:04 executing program 4:
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@in={0x2, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0)
request_key(0x0, 0x0, 0x0, 0xffffffffffffffff)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

10:29:04 executing program 0:
pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100), 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
stat(&(0x7f0000000600)='./bus\x00', &(0x7f0000000980))
lstat(0x0, &(0x7f0000000bc0))
lstat(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000340))
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="a40000f85adcd416bbb11c932090363e5d62cbc967c0014b7fdbf43956c498d74d1bf7542fb643a0755e85309ddf0dff697a284d799425ba3b1ac82db0659417a6312c2ff78fb3f7cf138afb2cc08a07e863fff310"], 0x55)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
unlinkat(r1, &(0x7f0000000440)='./bus\x00', 0x200)
unlinkat(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0xfffffffffffffffd, 0x3, 0x3}, 0x0)
accept(r1, &(0x7f0000000240)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f0000000400)=0x80)
creat(&(0x7f0000000100)='./file1\x00', 0x0)

10:29:04 executing program 2:
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')

10:29:04 executing program 5:
clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f2cffffff319bc070")
r1 = getpid()
ptrace(0x10, r1)
ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000002180)={0x0, 0xfcf0})

10:29:04 executing program 3:
syz_open_dev$sndseq(&(0x7f0000000380)='/dev/snd/seq\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x20000000000031, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f00000000c0))

10:29:04 executing program 1:
pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100), 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
stat(&(0x7f0000000600)='./bus\x00', &(0x7f0000000980))
lstat(0x0, &(0x7f0000000bc0))
lstat(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000340))
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="a40000f85adcd416bbb11c932090363e5d62cbc967c0014b7fdbf43956c498d74d1bf7542fb643a0755e85309ddf0dff697a284d799425ba3b1ac82db0659417a6312c2ff78fb3f7cf138afb2cc08a07e863fff310"], 0x55)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
unlinkat(r1, &(0x7f0000000440)='./bus\x00', 0x200)
unlinkat(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0xfffffffffffffffd, 0x3, 0x3}, 0x0)
accept(r1, &(0x7f0000000240)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f0000000400)=0x80)
creat(&(0x7f0000000000)='./file0\x00', 0x8)

10:29:04 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@in={0x2, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0)
request_key(0x0, 0x0, 0x0, 0xffffffffffffffff)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

10:29:04 executing program 5:
clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f2cffffff319bc070")
r1 = getpid()
ptrace(0x10, r1)
ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000002180)={0x0, 0xfcf0})

[  145.603353][ T9463] FAT-fs (loop0): error, invalid access to FAT (entry 0x00006500)
[  145.615863][ T9472] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500)
10:29:04 executing program 3:
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x80, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')

10:29:04 executing program 2:
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')

[  145.672469][ T9530] tmpfs: No value for mount option '¨6Š›ø]cše!­?šôeéòcÎZ%š'
10:29:04 executing program 5:
clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f2cffffff319bc070")
rt_tgsigqueueinfo(0x0, 0x0, 0x16, &(0x7f0000000000))
ptrace(0x10, 0x0)
ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000002180)={0x0, 0xfcf0})

10:29:04 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@in={0x2, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0)
request_key(0x0, 0x0, 0x0, 0xffffffffffffffff)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

10:29:04 executing program 5:
clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f2cffffff319bc070")
rt_tgsigqueueinfo(0x0, 0x0, 0x16, &(0x7f0000000000))
ptrace(0x10, 0x0)
ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000002180)={0x0, 0xfcf0})

[  145.853428][ T9548] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  145.896857][ T9553] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500)
[  145.915757][ T9553] FAT-fs (loop1): Filesystem has been set read-only
[  145.916118][ T9568] tmpfs: No value for mount option '¨6Š›ø]cše!­?šôeéòcÎZ%š'
[  145.926635][ T9553] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500)
[  145.943341][ T9548] FAT-fs (loop0): Filesystem has been set read-only
[  145.978708][ T9548] FAT-fs (loop0): error, invalid access to FAT (entry 0x00006500)
10:29:05 executing program 5:
clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f2cffffff319bc070")
rt_tgsigqueueinfo(0x0, 0x0, 0x16, &(0x7f0000000000))
ptrace(0x10, 0x0)
ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000002180)={0x0, 0xfcf0})

10:29:05 executing program 3:
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x80, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')

10:29:05 executing program 2:
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')

10:29:05 executing program 0:
pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100), 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
stat(&(0x7f0000000600)='./bus\x00', &(0x7f0000000980))
lstat(0x0, &(0x7f0000000bc0))
lstat(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000340))
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="a40000f85adcd416bbb11c932090363e5d62cbc967c0014b7fdbf43956c498d74d1bf7542fb643a0755e85309ddf0dff697a284d799425ba3b1ac82db0659417a6312c2ff78fb3f7cf138afb2cc08a07e863fff310"], 0x55)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
unlinkat(r1, &(0x7f0000000440)='./bus\x00', 0x200)
unlinkat(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0xfffffffffffffffd, 0x3, 0x3}, 0x0)
accept(r1, &(0x7f0000000240)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f0000000400)=0x80)

[  146.505691][ T9534] FAT-fs (loop0): error, invalid access to FAT (entry 0x00006500)
10:29:05 executing program 1:
pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100), 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
stat(&(0x7f0000000600)='./bus\x00', &(0x7f0000000980))
lstat(0x0, &(0x7f0000000bc0))
lstat(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000340))
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="a40000f85adcd416bbb11c932090363e5d62cbc967c0014b7fdbf43956c498d74d1bf7542fb643a0755e85309ddf0dff697a284d799425ba3b1ac82db0659417a6312c2ff78fb3f7cf138afb2cc08a07e863fff310"], 0x55)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
unlinkat(r1, &(0x7f0000000440)='./bus\x00', 0x200)
unlinkat(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0xfffffffffffffffd, 0x3, 0x3}, 0x0)
accept(r1, &(0x7f0000000240)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f0000000400)=0x80)
creat(&(0x7f0000000000)='./file0\x00', 0x8)

10:29:05 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@in={0x2, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0)
request_key(0x0, 0x0, 0x0, 0xffffffffffffffff)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

10:29:05 executing program 5:
clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = getpid()
rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000))
ptrace(0x10, r0)
ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000002180)={0x0, 0xfcf0})

10:29:05 executing program 2:
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, 0x0, &(0x7f0000000140)='devtmpfs\x00', 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')

[  146.552439][ T9585] tmpfs: No value for mount option '¨6Š›ø]cše!­?šôeéòcÎZ%š'
10:29:05 executing program 2:
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, 0x0, &(0x7f0000000140)='devtmpfs\x00', 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')

10:29:05 executing program 4:
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@in={0x2, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0)
request_key(0x0, 0x0, 0x0, 0xffffffffffffffff)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

10:29:05 executing program 2:
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, 0x0, &(0x7f0000000140)='devtmpfs\x00', 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')

10:29:05 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x40001)
writev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)="04", 0x1}], 0x1)

10:29:05 executing program 4:
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@in={0x2, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0)
request_key(0x0, 0x0, 0x0, 0xffffffffffffffff)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

[  146.842280][ T9612] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  146.879703][ T9612] FAT-fs (loop1): Filesystem has been set read-only
[  146.888354][ T9612] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500)
[  146.920076][ T9612] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500)
[  146.928987][ T9612] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500)
10:29:06 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x40001)
writev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)="04", 0x1}], 0x1)

10:29:06 executing program 2:
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')

10:29:06 executing program 4:
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@in={0x2, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0)
request_key(0x0, 0x0, 0x0, 0xffffffffffffffff)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

10:29:06 executing program 5:
clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = getpid()
rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000))
ptrace(0x10, r0)
ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000002180)={0x0, 0xfcf0})

[  147.447736][ T9602] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500)
10:29:06 executing program 1:
pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100), 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
stat(&(0x7f0000000600)='./bus\x00', &(0x7f0000000980))
lstat(0x0, &(0x7f0000000bc0))
lstat(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000340))
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="a40000f85adcd416bbb11c932090363e5d62cbc967c0014b7fdbf43956c498d74d1bf7542fb643a0755e85309ddf0dff697a284d799425ba3b1ac82db0659417a6312c2ff78fb3f7cf138afb2cc08a07e863fff310"], 0x55)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
unlinkat(r1, &(0x7f0000000440)='./bus\x00', 0x200)
unlinkat(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0xfffffffffffffffd, 0x3, 0x3}, 0x0)
creat(&(0x7f0000000100)='./file1\x00', 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x8)

10:29:06 executing program 0:
pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100), 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
stat(&(0x7f0000000600)='./bus\x00', &(0x7f0000000980))
lstat(0x0, &(0x7f0000000bc0))
lstat(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000340))
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="a40000f85adcd416bbb11c932090363e5d62cbc967c0014b7fdbf43956c498d74d1bf7542fb643a0755e85309ddf0dff697a284d799425ba3b1ac82db0659417a6312c2ff78fb3f7cf138afb2cc08a07e863fff310"], 0x55)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
unlinkat(r1, &(0x7f0000000440)='./bus\x00', 0x200)
unlinkat(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0xfffffffffffffffd, 0x3, 0x3}, 0x0)

10:29:06 executing program 2:
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')

10:29:06 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x40001)
writev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)="04", 0x1}], 0x1)

10:29:06 executing program 4:
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@in={0x2, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0)
request_key(0x0, 0x0, 0x0, 0xffffffffffffffff)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

10:29:06 executing program 4:
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@in={0x2, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0)
request_key(0x0, 0x0, 0x0, 0xffffffffffffffff)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

10:29:06 executing program 2:
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000000)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00')

10:29:06 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x40001)
writev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)="04", 0x1}], 0x1)

10:29:06 executing program 2:
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)

10:29:06 executing program 4:
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@in={0x2, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0)
request_key(0x0, 0x0, 0x0, 0xffffffffffffffff)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

[  147.794594][ T9665] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0)
10:29:06 executing program 3:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0)
ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x8000}, {r0, 0x10}, {r0, 0x40}, {0xffffffffffffffff, 0x10}, {r0, 0xa200}, {r0}, {r0, 0x4}], 0x7, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000300)={0x1}, 0x8)

[  147.839891][ T9665] FAT-fs (loop1): Filesystem has been set read-only
[  147.884945][ T9665] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500)
10:29:07 executing program 5:
clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = getpid()
rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000))
ptrace(0x10, r0)
ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000002180)={0x0, 0xfcf0})

10:29:07 executing program 1:
pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100), 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
stat(&(0x7f0000000600)='./bus\x00', &(0x7f0000000980))
lstat(0x0, &(0x7f0000000bc0))
lstat(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000340))
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="a40000f85adcd416bbb11c932090363e5d62cbc967c0014b7fdbf43956c498d74d1bf7542fb643a0755e85309ddf0dff697a284d799425ba3b1ac82db0659417a6312c2ff78fb3f7cf138afb2cc08a07e863fff310"], 0x55)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
unlinkat(r1, &(0x7f0000000440)='./bus\x00', 0x200)
unlinkat(0xffffffffffffffff, 0x0, 0x0)
creat(&(0x7f0000000100)='./file1\x00', 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x8)

10:29:07 executing program 2:
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)

10:29:07 executing program 0:
pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100), 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
stat(&(0x7f0000000600)='./bus\x00', &(0x7f0000000980))
lstat(0x0, &(0x7f0000000bc0))
lstat(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000340))
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="a40000f85adcd416bbb11c932090363e5d62cbc967c0014b7fdbf43956c498d74d1bf7542fb643a0755e85309ddf0dff697a284d799425ba3b1ac82db0659417a6312c2ff78fb3f7cf138afb2cc08a07e863fff310"], 0x55)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
unlinkat(r1, &(0x7f0000000440)='./bus\x00', 0x200)
unlinkat(0xffffffffffffffff, 0x0, 0x0)

10:29:07 executing program 4:
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@in={0x2, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0)
request_key(0x0, 0x0, 0x0, 0xffffffffffffffff)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

10:29:07 executing program 2:
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)

[  148.438823][ T9652] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500)
10:29:07 executing program 4:
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@in={0x2, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0)
request_key(0x0, 0x0, 0x0, 0xffffffffffffffff)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

10:29:07 executing program 4:
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@in={0x2, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0)
request_key(0x0, 0x0, 0x0, 0xffffffffffffffff)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

10:29:07 executing program 2:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup2(r1, r0)
sched_setaffinity(0x0, 0x0, 0x0)
accept4$packet(r2, 0x0, 0x0, 0x0)

[  148.696165][ T9713] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0)
10:29:07 executing program 4:
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@in={0x2, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0)
request_key(0x0, 0x0, 0x0, 0xffffffffffffffff)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

[  148.738220][ T9713] FAT-fs (loop1): Filesystem has been set read-only
[  148.755861][ T9713] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500)
10:29:07 executing program 4:
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@in={0x2, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0)
request_key(0x0, 0x0, 0x0, 0xffffffffffffffff)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

[  149.310957][ T9705] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500)
[  301.197860][ T1043] INFO: task syz-executor.3:9688 blocked for more than 143 seconds.
[  301.206070][ T1043]       Not tainted 5.1.0-rc4-next-20190411 #23
[  301.212418][ T1043] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  301.221125][ T1043] syz-executor.3  D28520  9688   9068 0x00000004
[  301.227682][ T1043] Call Trace:
[  301.231079][ T1043]  __schedule+0x817/0x1cc0
[  301.235618][ T1043]  ? retint_kernel+0x2d/0x2d
[  301.240671][ T1043]  ? __sched_text_start+0x8/0x8
[  301.245540][ T1043]  ? __mutex_lock+0x527/0x1310
[  301.250595][ T1043]  schedule+0x92/0x180
[  301.254853][ T1043]  schedule_preempt_disabled+0x13/0x20
[  301.260348][ T1043]  __mutex_lock+0x726/0x1310
[  301.265034][ T1043]  ? snd_seq_kernel_client_ctl+0xe5/0x170
[  301.270810][ T1043]  ? mutex_trylock+0x1e0/0x1e0
[  301.275622][ T1043]  ? odev_release+0x54/0x80
[  301.280364][ T1043]  ? __fput+0x2e5/0x8d0
[  301.284627][ T1043]  ? ____fput+0x16/0x20
[  301.288887][ T1043]  ? exit_to_usermode_loop+0x273/0x2c0
[  301.294460][ T1043]  ? do_syscall_64+0x52d/0x610
[  301.299556][ T1043]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  301.305666][ T1043]  ? lock_acquire+0x16f/0x3f0
[  301.310580][ T1043]  ? kasan_check_write+0x14/0x20
[  301.315592][ T1043]  ? do_raw_spin_lock+0x12a/0x2e0
[  301.320662][ T1043]  mutex_lock_nested+0x16/0x20
[  301.325447][ T1043]  ? mutex_lock_nested+0x16/0x20
[  301.330417][ T1043]  snd_seq_kernel_client_ctl+0xe5/0x170
[  301.336185][ T1043]  snd_seq_oss_writeq_clear+0xe0/0x140
[  301.341774][ T1043]  ? snd_seq_oss_writeq_wakeup+0xc0/0xc0
[  301.349138][ T1043]  ? snd_seq_oss_timer_delete+0x5a/0x80
[  301.354863][ T1043]  ? create_port+0x250/0x250
[  301.359519][ T1043]  snd_seq_oss_writeq_delete+0x20/0x40
[  301.365267][ T1043]  free_devinfo+0x66/0xc0
[  301.369644][ T1043]  port_delete+0xe8/0x1c0
[  301.373993][ T1043]  snd_seq_delete_port+0x266/0x330
[  301.379178][ T1043]  snd_seq_ioctl_delete_port+0xba/0x190
[  301.384972][ T1043]  snd_seq_kernel_client_ctl+0x112/0x170
[  301.390874][ T1043]  ? snd_seq_info_done+0x30/0x30
[  301.395948][ T1043]  snd_seq_event_port_detach+0xba/0x100
[  301.401907][ T1043]  ? snd_seq_event_port_attach+0x220/0x220
[  301.407758][ T1043]  ? kasan_check_write+0x14/0x20
[  301.412889][ T1043]  ? kfree+0x1bf/0x230
[  301.417227][ T1043]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  301.423121][ T1043]  delete_port+0x87/0xd0
[  301.427823][ T1043]  snd_seq_oss_release+0xf5/0x150
[  301.432860][ T1043]  odev_release+0x54/0x80
[  301.437323][ T1043]  __fput+0x2e5/0x8d0
[  301.441564][ T1043]  ____fput+0x16/0x20
[  301.445653][ T1043]  task_work_run+0x14a/0x1c0
[  301.450404][ T1043]  exit_to_usermode_loop+0x273/0x2c0
[  301.455973][ T1043]  do_syscall_64+0x52d/0x610
[  301.460817][ T1043]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  301.466845][ T1043] RIP: 0033:0x4129e1
[  301.470797][ T1043] Code: e8 34 99 01 00 e9 45 fe ff ff 4c 8b 86 80 00 00 00 4c 39 c3 72 08 48 85 f6 e9 32 fd ff ff 44 0f b6 46 64 41 80 f8 01 74 08 48 <85> f6 e9 1f fd ff ff 0f b7 56 5e 66 85 d2 74 6a 48 29 fb 0f b7 d2
[  301.491195][ T1043] RSP: 002b:00007ffdf8602ad0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[  301.500354][ T1043] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00000000004129e1
[  301.508416][ T1043] RDX: 0000001b32720000 RSI: 0000000000000000 RDI: 0000000000000003
[  301.516537][ T1043] RBP: 0000000000740578 R08: 00000000adf569bf R09: 00000000adf569c3
[  301.525954][ T1043] R10: 00007ffdf8602ba0 R11: 0000000000000293 R12: 0000000000000001
[  301.534481][ T1043] R13: 00000000000241a2 R14: 00000000000241cf R15: 000000000073bf0c
[  301.542718][ T1043] INFO: lockdep is turned off.
[  301.547547][ T1043] NMI backtrace for cpu 0
[  301.552037][ T1043] CPU: 0 PID: 1043 Comm: khungtaskd Not tainted 5.1.0-rc4-next-20190411 #23
[  301.560881][ T1043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  301.571168][ T1043] Call Trace:
[  301.574515][ T1043]  dump_stack+0x172/0x1f0
[  301.578930][ T1043]  nmi_cpu_backtrace.cold+0x63/0xa4
[  301.584526][ T1043]  ? lapic_can_unplug_cpu.cold+0x38/0x38
[  301.590151][ T1043]  nmi_trigger_cpumask_backtrace+0x1be/0x236
[  301.596119][ T1043]  arch_trigger_cpumask_backtrace+0x14/0x20
[  301.602018][ T1043]  watchdog+0x9b7/0xec0
[  301.606328][ T1043]  kthread+0x357/0x430
[  301.610934][ T1043]  ? reset_hung_task_detector+0x30/0x30
[  301.616689][ T1043]  ? kthread_cancel_delayed_work_sync+0x20/0x20
[  301.622942][ T1043]  ret_from_fork+0x3a/0x50
[  301.627532][ T1043] Sending NMI from CPU 0 to CPUs 1:
[  301.633050][    C1] NMI backtrace for cpu 1 skipped: idling at native_safe_halt+0x2/0x10
[  301.634165][ T1043] Kernel panic - not syncing: hung_task: blocked tasks
[  301.651081][ T1043] CPU: 0 PID: 1043 Comm: khungtaskd Not tainted 5.1.0-rc4-next-20190411 #23
[  301.659852][ T1043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  301.670775][ T1043] Call Trace:
[  301.674182][ T1043]  dump_stack+0x172/0x1f0
[  301.679405][ T1043]  panic+0x2cb/0x72b
[  301.683431][ T1043]  ? __warn_printk+0xf3/0xf3
[  301.688015][ T1043]  ? lapic_can_unplug_cpu.cold+0x38/0x38
[  301.694147][ T1043]  ? ___preempt_schedule+0x16/0x18
[  301.699266][ T1043]  ? nmi_trigger_cpumask_backtrace+0x19e/0x236
[  301.705530][ T1043]  ? nmi_trigger_cpumask_backtrace+0x1fa/0x236
[  301.711790][ T1043]  ? nmi_trigger_cpumask_backtrace+0x204/0x236
[  301.717937][ T1043]  ? nmi_trigger_cpumask_backtrace+0x19e/0x236
[  301.724146][ T1043]  watchdog+0x9c8/0xec0
[  301.728787][ T1043]  kthread+0x357/0x430
[  301.733620][ T1043]  ? reset_hung_task_detector+0x30/0x30
[  301.739175][ T1043]  ? kthread_cancel_delayed_work_sync+0x20/0x20
[  301.745496][ T1043]  ret_from_fork+0x3a/0x50
[  301.751265][ T1043] Kernel Offset: disabled
[  301.755599][ T1043] Rebooting in 86400 seconds..