0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:54:15 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0))
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r2})
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:15 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYRESDEC, @ANYBLOB=',euid=', @ANYBLOB=',smac'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

[ 2878.217744] FAT-fs (loop4): Filesystem has been set read-only
[ 2878.222644] FAT-fs (loop4): error, invalid access to FAT (entry 0x00007400)
[ 2878.234990] FAT-fs (loop1): error, invalid access to FAT (entry 0x00007400)
[ 2878.239404] FAT-fs (loop4): error, invalid access to FAT (entry 0x00007400)
07:54:15 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x1b\x0f\x00', 0x1132})

07:54:15 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYRESDEC, @ANYBLOB=',euid=', @ANYBLOB=',smac'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:15 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYRESDEC, @ANYBLOB=',euid=', @ANYBLOB=',smac'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

[ 2878.718503] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2878.820208] FAT-fs (loop1): Filesystem has been set read-only
[ 2878.993510] FAT-fs (loop1): error, invalid access to FAT (entry 0x00007400)
[ 2879.066521] FAT-fs (loop1): error, invalid access to FAT (entry 0x00007400)
07:54:16 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:54:16 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYRESDEC, @ANYBLOB=',euid=', @ANYBLOB=',smac'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:16 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0))
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r2})
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:16 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x0f\x1b\x00', 0x1132})

07:54:16 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x0)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYRESDEC, @ANYBLOB=',euid=', @ANYRESDEC, @ANYBLOB=',smackfsdef=vfat\x00,\x00'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:16 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYRESDEC, @ANYBLOB=',euid=', @ANYBLOB=',smac'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

[ 2879.631760] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2879.721182] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2879.777701] FAT-fs (loop1): Filesystem has been set read-only
[ 2879.808249] FAT-fs (loop2): Filesystem has been set read-only
[ 2879.893560] FAT-fs (loop1): error, invalid access to FAT (entry 0x00007400)
[ 2880.068420] FAT-fs (loop1): error, invalid access to FAT (entry 0x00007400)
[ 2880.102225] FAT-fs (loop2): error, invalid access to FAT (entry 0x00007400)
07:54:17 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

[ 2880.189588] FAT-fs (loop2): error, invalid access to FAT (entry 0x00007400)
07:54:17 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x00\x1e\x00', 0x1132})

07:54:17 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYRESDEC, @ANYBLOB=',euid=', @ANYBLOB=',sm'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:17 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0))
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r2})
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:17 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x0)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYRESDEC, @ANYBLOB=',euid=', @ANYRESDEC, @ANYBLOB=',smackfsdef=vfat\x00,\x00'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:17 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYRESDEC, @ANYBLOB=',euid=', @ANYBLOB=',smac'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

[ 2880.825141] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2880.898891] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2880.965567] FAT-fs (loop5): Filesystem has been set read-only
[ 2880.986170] FAT-fs (loop5): error, invalid access to FAT (entry 0x00007400)
[ 2881.001391] FAT-fs (loop5): error, invalid access to FAT (entry 0x00007400)
[ 2881.023539] FAT-fs (loop5): error, invalid access to FAT (entry 0x00007400)
[ 2881.110551] FAT-fs (loop5): error, invalid access to FAT (entry 0x00007400)
07:54:18 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:54:18 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYRESDEC, @ANYBLOB=',euid=', @ANYBLOB=',sm'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:18 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r2})
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:18 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x00\x1f\x00', 0x1132})

07:54:18 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x0)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYRESDEC, @ANYBLOB=',euid=', @ANYRESDEC, @ANYBLOB=',smackfsdef=vfat\x00,\x00'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:18 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYRESDEC, @ANYBLOB=',euid=', @ANYBLOB=',smac'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:19 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:54:19 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x00 \x00', 0x1132})

07:54:19 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYRESDEC, @ANYBLOB=',euid=', @ANYBLOB=',sm'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:19 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r2})
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:19 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYRESDEC, @ANYBLOB=',euid=', @ANYBLOB=',smac'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:19 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYRESDEC, @ANYBLOB=',euid=', @ANYBLOB=',smac'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:20 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x00.\x00', 0x1132})

07:54:20 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

[ 2883.476436] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0)
07:54:20 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYRESDEC, @ANYBLOB=',euid=', @ANYBLOB=',sma'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

[ 2883.570270] FAT-fs (loop4): Filesystem has been set read-only
07:54:20 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r2})
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

[ 2883.702916] FAT-fs (loop4): error, invalid access to FAT (entry 0x00007400)
[ 2883.792977] FAT-fs (loop4): error, invalid access to FAT (entry 0x00007400)
[ 2883.972377] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0)
07:54:20 executing program 4:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x00\x00\x00\x00\x05\xbe\x8b\x00', 0x1132})

[ 2884.015658] FAT-fs (loop1): Filesystem has been set read-only
[ 2884.039291] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2884.091271] FAT-fs (loop2): Filesystem has been set read-only
[ 2884.123425] FAT-fs (loop2): error, invalid access to FAT (entry 0x00007400)
07:54:21 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x032\x00', 0x1132})

[ 2884.143967] FAT-fs (loop1): error, invalid access to FAT (entry 0x00007400)
[ 2884.163983] FAT-fs (loop2): error, invalid access to FAT (entry 0x00007400)
07:54:21 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYRESDEC, @ANYBLOB=',euid=', @ANYRESDEC, @ANYBLOB=',smackfsdef=vfat\x00,\x00'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

[ 2884.234046] FAT-fs (loop1): error, invalid access to FAT (entry 0x00007400)
07:54:21 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:54:21 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r2})
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:21 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYRESDEC, @ANYBLOB=',euid=', @ANYBLOB=',sma'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:21 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:54:21 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYRESDEC, @ANYBLOB=',euid=', @ANYBLOB=',sma'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:21 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x00?\x00', 0x1132})

07:54:22 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

[ 2885.249911] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0)
07:54:22 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r2})
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

[ 2885.341982] FAT-fs (loop4): Filesystem has been set read-only
07:54:22 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',s'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

[ 2885.419150] FAT-fs (loop4): error, invalid access to FAT (entry 0x00007400)
[ 2885.434687] FAT-fs (loop4): error, invalid access to FAT (entry 0x00007400)
07:54:22 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYRESDEC, @ANYBLOB=',euid=', @ANYBLOB=',sma'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:22 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:54:22 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYRESDEC, @ANYBLOB=',euid=', @ANYBLOB=',sma'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:22 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x00@\x00', 0x1132})

07:54:22 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

[ 2886.293641] FAT-fs (loop5): error, invalid access to FAT (entry 0x00007400)
[ 2886.348267] FAT-fs (loop5): Filesystem has been set read-only
07:54:23 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r2})
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:23 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYRESDEC, @ANYBLOB=',smac'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:23 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:54:23 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x00\x00\x00\x00\x05\xbe\x84\x00', 0x1132})

07:54:23 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYRESDEC, @ANYBLOB=',euid=', @ANYBLOB=',sma'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:23 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:54:23 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x00H\x00', 0x1132})

[ 2887.235894] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2887.255895] FAT-fs (loop4): Filesystem has been set read-only
07:54:24 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(0x0, 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYRESDEC, @ANYBLOB=',euid=', @ANYRESDEC, @ANYBLOB=',smackfsdef=vfat\x00,\x00'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:24 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x00L\x00', 0x1132})

[ 2887.344831] FAT-fs (loop4): error, invalid access to FAT (entry 0x00007400)
[ 2887.382364] FAT-fs (loop4): error, invalid access to FAT (entry 0x00007400)
07:54:24 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r2})
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:24 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYRESDEC, @ANYBLOB=',smac'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:24 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYRESDEC, @ANYBLOB=',euid=', @ANYRESDEC, @ANYBLOB=',smackfsdef=vfat\x00,\x00'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:24 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:54:25 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x87`\x00', 0x1132})

07:54:25 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x00L\x00', 0x1132})

07:54:25 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r2})
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:25 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYRESDEC, @ANYBLOB=',smac'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:25 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYRESDEC, @ANYBLOB=',euid=', @ANYRESDEC, @ANYBLOB=',smackfsdef=vfat\x00,\x00'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:25 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

[ 2889.078866] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2889.162143] FAT-fs (loop4): Filesystem has been set read-only
[ 2889.180022] FAT-fs (loop4): error, invalid access to FAT (entry 0x00007400)
07:54:26 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x10001000008912, &(0x7f0000000180)="0adc1f123c123b3188b070674d769bbd548c71a830155fee2d960a6f650b734804b2f0a0c8e7600989d54c4d54e7a906ca6580232a13ca628de1eb9b7dc543701169941b94703dfba466cf2a60a96ed4f5a7ead446a45097919e90b7ec3691faeb19ce9ccf31f85d2ae4d9ab77f5707c734f58b9d43a008c5c272ff60e35664900")
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key$keyring(&(0x7f0000000140)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0), 0x0)
io_setup(0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x806}, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x8100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
r1 = socket(0x200000000000011, 0x3, 0x8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'ip6gre0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmmsg(r1, &(0x7f0000000d00), 0x40000000000026f, 0x3)

07:54:26 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x00h\x00', 0x1132})

[ 2889.202568] FAT-fs (loop4): error, invalid access to FAT (entry 0x00007400)
07:54:26 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r2})
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:26 executing program 4:
r0 = socket(0x200000000000011, 0x3, 0x8)
getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip6gre0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14)
bind$packet(r0, &(0x7f0000000100)={0x11, 0xc, r1, 0x1, 0x7dd176b6, 0x6, @link_local}, 0x14)
sendmmsg(r0, &(0x7f0000000180), 0x6f8, 0x24000804)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f00000000c0)={r0, 0x7f})
getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x8)

07:54:26 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYRESDEC, @ANYBLOB])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:26 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:54:26 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x00l\x00', 0x1132})

07:54:27 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYRESDEC, @ANYBLOB=',euid=', @ANYRESDEC, @ANYBLOB=',smackfsdef=vfat\x00,\x00'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:27 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYRESDEC, @ANYBLOB=',euid=', @ANYRESDEC, @ANYBLOB=',smackfsdef=vfat\x00,\x00'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:27 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r2})
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:27 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x00t\x00', 0x1132})

07:54:27 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYRESDEC, @ANYBLOB])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:28 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:54:28 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x00\x00\x00\x00\x05\xbep\x00', 0x1132})

07:54:28 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYRESDEC, @ANYBLOB=',euid=', @ANYBLOB=','])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:28 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r2})
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:28 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYRESDEC, @ANYBLOB])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:28 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x00z\x00', 0x1132})

[ 2891.902787] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2891.910647] FAT-fs (loop2): Filesystem has been set read-only
[ 2892.171734] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0)
07:54:29 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

[ 2892.264999] FAT-fs (loop1): Filesystem has been set read-only
[ 2892.308373] FAT-fs (loop2): error, invalid access to FAT (entry 0x00007400)
[ 2892.316244] FAT-fs (loop2): error, invalid access to FAT (entry 0x00007400)
07:54:29 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYRESDEC, @ANYBLOB=',euid=', @ANYBLOB=',smac'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

[ 2892.424705] FAT-fs (loop1): error, invalid access to FAT (entry 0x00007400)
07:54:29 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r2})
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

[ 2892.470526] FAT-fs (loop1): error, invalid access to FAT (entry 0x00007400)
07:54:29 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYRESDEC, @ANYBLOB=',euid=', @ANYRESDEC, @ANYBLOB=',smackfsdef=vfat\x00,\x00'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:29 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYRESDEC, @ANYBLOB=',sm'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

[ 2892.566996] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2892.571646] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2892.583137] FAT-fs (loop5): Filesystem has been set read-only
[ 2892.632887] FAT-fs (loop5): error, invalid access to FAT (entry 0x00007400)
[ 2892.642220] FAT-fs (loop5): error, invalid access to FAT (entry 0x00007400)
[ 2892.649738] FAT-fs (loop5): error, invalid access to FAT (entry 0x00007400)
[ 2892.666780] FAT-fs (loop5): error, invalid access to FAT (entry 0x00007400)
[ 2892.707630] FAT-fs (loop4): invalid media value (0x00)
07:54:29 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
fchdir(0xffffffffffffffff)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

[ 2892.823537] FAT-fs (loop4): Can't find a valid FAT filesystem
07:54:29 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x02\x90\x00', 0x1132})

07:54:30 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(0x0, 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r2})
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:30 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYRESDEC, @ANYBLOB=',euid=', @ANYBLOB=','])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:30 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYRESDEC, @ANYBLOB=',sm'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:30 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYRESDEC, @ANYBLOB=',euid=', @ANYBLOB=',smackfsdef=vfa'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:30 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x01\x94\x00', 0x1132})

[ 2893.844779] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2893.855209] FAT-fs (loop2): Filesystem has been set read-only
07:54:30 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
fchdir(0xffffffffffffffff)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

[ 2894.005620] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2894.082584] FAT-fs (loop4): Filesystem has been set read-only
[ 2894.158700] FAT-fs (loop2): error, invalid access to FAT (entry 0x00007400)
[ 2894.236629] FAT-fs (loop2): error, invalid access to FAT (entry 0x00007400)
07:54:31 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(0x0, 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r2})
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

[ 2894.444076] FAT-fs (loop4): error, invalid access to FAT (entry 0x00007400)
07:54:31 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x03\xa3\x00', 0x1132})

[ 2894.493099] FAT-fs (loop4): error, invalid access to FAT (entry 0x00007400)
07:54:31 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x00\x00\x00\x00\x05\xbe]\x00', 0x1132})

07:54:31 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYRESDEC, @ANYBLOB=',sm'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:31 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYRESDEC, @ANYBLOB=',euid=', @ANYBLOB=',smackfsdef=vfa'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

[ 2895.000283] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0)
07:54:31 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
fchdir(0xffffffffffffffff)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

[ 2895.041133] FAT-fs (loop1): Filesystem has been set read-only
[ 2895.059367] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2895.069890] FAT-fs (loop4): Filesystem has been set read-only
[ 2895.127756] FAT-fs (loop1): error, invalid access to FAT (entry 0x00007400)
[ 2895.148258] FAT-fs (loop4): error, invalid access to FAT (entry 0x00007400)
[ 2895.168421] FAT-fs (loop1): error, invalid access to FAT (entry 0x00007400)
07:54:32 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYRESDEC, @ANYBLOB=',sma'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

[ 2895.182469] FAT-fs (loop4): error, invalid access to FAT (entry 0x00007400)
07:54:32 executing program 4:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x00\x00\x00\x00\x05\xbe\\\x00', 0x1132})

07:54:32 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYRESDEC, @ANYBLOB=',euid=', @ANYRESDEC, @ANYBLOB=',smackfsdef=vfat'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:32 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x02\xb1\x00', 0x1132})

07:54:32 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(0x0, 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r2})
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:32 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYRESDEC, @ANYBLOB=',euid=', @ANYRESDEC, @ANYBLOB=',smackfsdef=vfat'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:32 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:54:33 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x00\xdc\x00', 0x1132})

07:54:33 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYRESDEC, @ANYBLOB=',sma'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

[ 2896.408364] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2896.485722] FAT-fs (loop4): error, invalid access to FAT (entry 0x00007400)
[ 2896.511480] FAT-fs (loop4): Filesystem has been set read-only
07:54:33 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYRESDEC, @ANYBLOB=',euid=', @ANYRESDEC, @ANYBLOB=',smackfsdef=vfat\x00,\x00'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

[ 2896.539121] FAT-fs (loop4): error, invalid access to FAT (entry 0x00007400)
07:54:33 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x0)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r2})
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

[ 2896.719042] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0)
07:54:33 executing program 4:
r0 = socket(0x200000000000011, 0x3, 0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip6gre0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x1100)

[ 2896.826445] FAT-fs (loop1): Filesystem has been set read-only
[ 2896.896339] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
07:54:33 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x03\xe8\x00', 0x1132})

[ 2896.950666] FAT-fs (loop1): error, invalid access to FAT (entry 0x00007400)
[ 2896.970720] FAT-fs (loop2): Filesystem has been set read-only
[ 2896.989899] FAT-fs (loop1): error, invalid access to FAT (entry 0x00007400)
[ 2897.044487] FAT-fs (loop5): error, invalid access to FAT (entry 0x00007400)
07:54:33 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x0)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r2})
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

[ 2897.089765] FAT-fs (loop5): Filesystem has been set read-only
07:54:34 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:54:34 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYRESDEC, @ANYBLOB=',sm'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:34 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f12")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYRESDEC, @ANYBLOB=',euid=', @ANYRESDEC, @ANYBLOB=',smackfsdef=vfat\x00,\x00'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

[ 2897.509235] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0)
07:54:34 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x0)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r2})
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:34 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x00\xfc\x00', 0x1132})

[ 2897.615593] FAT-fs (loop1): Filesystem has been set read-only
07:54:34 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f12")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYRESDEC, @ANYBLOB=',euid=', @ANYRESDEC, @ANYBLOB=',smackfsdef=vfat\x00,\x00'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

[ 2897.708444] FAT-fs (loop1): error, invalid access to FAT (entry 0x00007400)
[ 2897.770142] FAT-fs (loop1): error, invalid access to FAT (entry 0x00007400)
07:54:34 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r2})
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:34 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYRESDEC, @ANYBLOB=',sm'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:35 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:54:35 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\\\xbe\x05\x00', 0x1132})

07:54:35 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f12")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYRESDEC, @ANYBLOB=',euid=', @ANYRESDEC, @ANYBLOB=',smackfsdef=vfat\x00,\x00'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:35 executing program 0:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
rmdir(&(0x7f0000000240)='./file0\x00')

07:54:35 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r2})
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:35 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYRESDEC, @ANYBLOB=',sm'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

[ 2899.007412] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0)
07:54:35 executing program 0:
setrlimit(0x7, &(0x7f0000000080))
signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8)

[ 2899.117356] FAT-fs (loop4): Filesystem has been set read-only
07:54:36 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00]\xbe\x05\x00', 0x1132})

07:54:36 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)

[ 2899.254065] FAT-fs (loop4): error, invalid access to FAT (entry 0x00007400)
[ 2899.286892] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2899.355742] FAT-fs (loop4): error, invalid access to FAT (entry 0x00007400)
[ 2899.394585] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
07:54:36 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

[ 2899.401304] FAT-fs (loop1): Filesystem has been set read-only
[ 2899.500440] FAT-fs (loop1): error, invalid access to FAT (entry 0x00007400)
07:54:36 executing program 4:
r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0)
sysfs$2(0x2, 0x8000, &(0x7f0000000040)=""/93)
dup2(r0, r0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000140))

07:54:36 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)

[ 2899.553898] FAT-fs (loop1): error, invalid access to FAT (entry 0x00007400)
07:54:36 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYBLOB=',sma'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:36 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)

[ 2899.688863] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2899.721533] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2899.746538] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2899.763018] FAT-fs (loop5): Filesystem has been set read-only
07:54:36 executing program 4:
socket$inet_tcp(0x2, 0x1, 0x0)
clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x17)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x8, 0x0, 0x0, 0x3, 0x2a})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r0, 0x0, 0x0)

[ 2899.788278] FAT-fs (loop5): error, invalid access to FAT (entry 0x00007400)
07:54:36 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)

07:54:36 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r2})
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

[ 2899.959406] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
07:54:36 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00^\xbe\x05\x00', 0x1132})

07:54:36 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d1d333565000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000"], 0x1}}, 0x0)

[ 2900.017443] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0)
07:54:37 executing program 0:
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)

[ 2900.158694] FAT-fs (loop1): Filesystem has been set read-only
07:54:37 executing program 4:
socket$inet6_tcp(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
socket(0x0, 0x0, 0x0)
syz_open_dev$sndtimer(0x0, 0x0, 0x0)
r2 = dup(r0)
ioctl$TIOCEXCL(r1, 0x540c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
timer_create(0x0, 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000009f80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001}}], 0x1, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0xfffffffffffffffd)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000100))
ftruncate(r3, 0x80003)
sendfile(r0, r3, &(0x7f00000000c0), 0x8000fffffffe)

[ 2900.220465] FAT-fs (loop1): error, invalid access to FAT (entry 0x00007400)
[ 2900.262428] FAT-fs (loop1): error, invalid access to FAT (entry 0x00007400)
[ 2900.318790] FAT-fs (loop5): error, invalid access to FAT (entry 0x00007400)
07:54:38 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:54:38 executing program 0:
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)

07:54:38 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:38 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00_\xbe\x05\x00', 0x1132})

07:54:38 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7)
r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$vhci(0xffffffffffffff9c, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xffd8)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:54:38 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYBLOB=',sma'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

[ 2901.215235] FAT-fs (loop5): error, fat_get_cluster: detected the cluster chain loop (i_pos 0)
07:54:38 executing program 0:
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)

07:54:38 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7)
r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$vhci(0xffffffffffffff9c, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xffd8)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:54:38 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7)
r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$vhci(0xffffffffffffff9c, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xffd8)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:54:38 executing program 0:
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)

07:54:38 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7)
r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$vhci(0xffffffffffffff9c, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xffd8)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:54:38 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00`\xbe\x05\x00', 0x1132})

07:54:39 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYBLOB=',sma'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:39 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:54:39 executing program 0:
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)

07:54:39 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:39 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7)
r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$vhci(0xffffffffffffff9c, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:54:39 executing program 0:
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)

07:54:39 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7)
r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$vhci(0xffffffffffffff9c, 0x0, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2902.438077] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
07:54:39 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00a\xbe\x05\x00', 0x1132})

[ 2902.600134] FAT-fs (loop2): Filesystem has been set read-only
07:54:39 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x0)

07:54:39 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7)
r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2902.780606] FAT-fs (loop2): error, invalid access to FAT (entry 0x00007400)
[ 2902.812475] FAT-fs (loop2): error, invalid access to FAT (entry 0x00007400)
07:54:39 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:54:39 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x0)

07:54:39 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYBLOB])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:40 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:54:40 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:40 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x0)

07:54:40 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:54:40 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00b\xbe\x05\x00', 0x1132})

07:54:40 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)

07:54:40 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:54:40 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:40 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:54:40 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)

07:54:40 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYBLOB])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:40 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2903.959464] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2903.997005] FAT-fs (loop2): Filesystem has been set read-only
[ 2904.013806] FAT-fs (loop2): error, invalid access to FAT (entry 0x00007400)
07:54:41 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:54:41 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00c\xbe\x05\x00', 0x1132})

07:54:41 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)

07:54:41 executing program 4:
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:54:41 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:41 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={0x0}}, 0x0)

07:54:41 executing program 4:
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2904.513803] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2904.550934] FAT-fs (loop2): Filesystem has been set read-only
07:54:41 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={0x0}}, 0x0)

[ 2904.590638] FAT-fs (loop2): error, invalid access to FAT (entry 0x00007400)
07:54:41 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:41 executing program 4:
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:54:41 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYBLOB])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:41 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={0x0}}, 0x0)

[ 2905.031821] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2905.056722] FAT-fs (loop2): Filesystem has been set read-only
[ 2905.099464] FAT-fs (loop2): error, invalid access to FAT (entry 0x00007400)
07:54:42 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)

07:54:42 executing program 4:
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:54:42 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00d\xbe\x05\x00', 0x1132})

07:54:42 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:54:42 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:42 executing program 4:
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:54:42 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)

07:54:42 executing program 4:
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2905.564744] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
07:54:42 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)

[ 2905.608884] FAT-fs (loop2): Filesystem has been set read-only
07:54:42 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x0)

[ 2905.654326] FAT-fs (loop2): error, invalid access to FAT (entry 0x00007400)
07:54:42 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYBLOB=',s'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:42 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:42 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1}}}, 0xb8}}, 0x0)

07:54:42 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00e\xbe\x05\x00', 0x1132})

07:54:42 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x0)

[ 2905.934652] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2906.174274] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2906.177038] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2906.210393] FAT-fs (loop2): Filesystem has been set read-only
07:54:43 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:54:43 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x0)

07:54:43 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1}}}, 0xb8}}, 0x0)

[ 2906.227474] FAT-fs (loop1): Filesystem has been set read-only
[ 2906.249491] FAT-fs (loop1): error, invalid access to FAT (entry 0x00007400)
[ 2906.260040] FAT-fs (loop2): error, invalid access to FAT (entry 0x00007400)
07:54:43 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:43 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, 0x0}, 0x0)

[ 2906.290041] FAT-fs (loop1): error, invalid access to FAT (entry 0x00007400)
[ 2906.306567] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
07:54:43 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYBLOB=',s'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:43 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, 0x0}, 0x0)

07:54:43 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1}}}, 0xb8}}, 0x0)

[ 2906.670574] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2906.703605] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2906.714603] FAT-fs (loop2): Filesystem has been set read-only
07:54:43 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

[ 2906.735863] FAT-fs (loop2): error, invalid access to FAT (entry 0x00007400)
07:54:43 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4134e475824fbfaeefb678580e4aedd886c0b629cd32c56ebff9ff7fc3ab0a4b8c171676b94083085709920673944ded2f376e000000000000001000", "49710f29a576931228cd8c92a1b9375555874f087c766b616155647a2732f399"})

07:54:43 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00f\xbe\x05\x00', 0x1132})

07:54:43 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, 0x0}, 0x0)

07:54:44 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:54:44 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={0x0}}, 0x0)

07:54:44 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88b070")
r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r2 = dup2(r1, r1)
signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4134e475824fbfaeefb678580e4aedd886c0b629cd32c56ebff9ff7fc3ab0a4b8c171676b94083085709920673944ded2f376e000000000000001000", "49710f29a576931228cd8c92a1b9375555874f087c766b616155647a2732f399"})

07:54:44 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:44 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={0x0}}, 0x0)

07:54:44 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYBLOB=',s'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:44 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={0x0}}, 0x0)

07:54:44 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, <r2=>0xffffffffffffffff})
dup2(r0, r2)

07:54:44 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00g\xbe\x05\x00', 0x1132})

[ 2907.704296] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
07:54:44 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x0, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2907.751712] FAT-fs (loop2): Filesystem has been set read-only
07:54:44 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, <r2=>0xffffffffffffffff})
dup2(r0, r2)

[ 2907.809944] FAT-fs (loop2): error, invalid access to FAT (entry 0x00007400)
07:54:44 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000), 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:45 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:54:45 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x0, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:54:45 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x4)
socket(0x2, 0x3, 0x3)
sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000540)={0x10, 0xf0ffffff00000f00}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48000000140007020000000000005e0002ff00064325e3ed363755226ef8dcdc43824733f691ed05f23116562b812081"], 0x1}}, 0x0)

[ 2908.237117] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2908.247763] FAT-fs (loop2): Filesystem has been set read-only
07:54:45 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00h\xbe\x05\x00', 0x1132})

07:54:45 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x0, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2908.322457] FAT-fs (loop2): error, invalid access to FAT (entry 0x00007400)
07:54:45 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYBLOB=',sm'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:45 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, <r2=>0xffffffffffffffff})
dup2(r0, r2)

07:54:45 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000), 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:45 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x14, 0x24, 0x1}, 0x14}}, 0x0)

07:54:45 executing program 0:
socket$key(0xf, 0x3, 0x2)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
io_setup(0x7, &(0x7f0000000200)=<r0=>0x0)
io_cancel(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x10000, 0xffffffffffffffff, 0x0}, 0x0)

[ 2908.753599] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0)
07:54:45 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x14, 0x24, 0x1}, 0x14}}, 0x0)

[ 2908.815243] FAT-fs (loop1): Filesystem has been set read-only
[ 2908.857731] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2908.897145] FAT-fs (loop2): Filesystem has been set read-only
[ 2908.938106] FAT-fs (loop2): error, invalid access to FAT (entry 0x00007400)
[ 2908.977631] FAT-fs (loop1): error, invalid access to FAT (entry 0x00007400)
07:54:45 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x14, 0x24, 0x1}, 0x14}}, 0x0)

[ 2908.988995] FAT-fs (loop1): error, invalid access to FAT (entry 0x00007400)
07:54:46 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000), 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:46 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00i\xbe\x05\x00', 0x1132})

07:54:46 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYBLOB=',sm'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:46 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000400)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0})

07:54:46 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:54:46 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
write(r0, &(0x7f0000000040)="1f0000008104ff00fd4354c007510000f3e9000008000100010423dcffdf00", 0x1f)

07:54:46 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00*', 0x5001})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x20)
dup2(r0, r1)

[ 2909.349420] binder: 28320:28338 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER
07:54:46 executing program 4:
r0 = socket$inet6(0xa, 0x3, 0x5a)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f0000005f00)=[{{&(0x7f0000003b00)=@xdp={0x2c, 0x6, 0x0, 0x17}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000003b80)="063caf76d1dfb6a1b4edb2fdf1c5c6e0cc2c62ad1cf5a67f2cd8da69e943836977b96d6b383a983ad847f02b5b2aa73fb5e88b9dad9d6cce464f477f7ddc39b67a1775983f195afc9b605b44267458f9daeff20990ef385d9a4b0edcf1b909c545748957b3e2fd52ebed96ff890f23b3213df77d727b321e15f0fca07420a2eabe1fbca8aefc40d1d78ece785de4d4e3e66b9e2e2ff6db969beedf7a18ab4c6f666e6add934a0a04ce18b0bfef727dd802a26ab6df64f3acb49f85ae738a15845a39d44a6005", 0xc6}], 0x1}, 0x7120}, {{&(0x7f0000003cc0)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x10000000}, 0x80, &(0x7f00000050c0)=[{&(0x7f0000004fc0)="0c3bcc04a8e7b077683242a381ce7952c9ddc5238fdcbccb9da69b6fdcfc497464fe6b6f943990c1ce385e2cf4a0902958b7445b8f35f4403fda43817051f81e4de742f1ffa3848752cde4f7331a10a78ec694c97a5a99e98d9b54926ad015f87a971215feb023a12deec4970e532129f6e3768cf514346f745af216c94aa2a0b2ff21467bbaa223dd269aad19122dbaed7d4394b01f78b6fea75fd303010c028b27ee62c4bc5429a9691d4c344169e68ad034f4f86fd806c4e82566caeac46b337522c44d91cd1aef73c4dddba1f45a3aeabe738038697320c44e085f0a9d79dd17757ee7539e5cb1b07e56b2", 0xed}], 0x1}, 0x500f}, {{&(0x7f00000052c0)=@nfc={0x27, 0x1, 0x1, 0x3}, 0x80, &(0x7f0000005500)=[{&(0x7f0000005400)="e9e74cff0da66c4ad8df5c72fc2b20753e1d323db7d05e4521faaf4c760bd383ac6772bf0f8a811337233acd3cdaea3e7be8098160d617d7f3ae3e2b34a06483a51b5106f90d17d1d6257e445db4c6a21b6961ef0684184b1fc51334a4e60caf27207799bc14304db4f1a640f62b3c760f5e4577b10dda65a16ad4d2002e625e0775f9d0f6a9061853c199f423756c3f38238a88552c2fffd0b84d61e354c863081fc6bdd173430dae2fc5c0259dc554c3ee3c363ad00f4e025af30b1f78cc659bfeb7fdf12ef8a69f13bff26328be913a498af0914ca204400795ae78c752615c14b90cf708a0776171eac200", 0xed}], 0x1}, 0x52}, {{&(0x7f0000005940)=@l2, 0x80, 0x0}, 0x7f}], 0x4, 0x8004)

07:54:46 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000), 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:46 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:46 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000), 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:46 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00j\xbe\x05\x00', 0x1132})

07:54:46 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:47 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYBLOB=',sm'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:47 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

[ 2910.549789] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2910.558111] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
07:54:47 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

[ 2910.595563] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2910.633009] FAT-fs (loop4): Filesystem has been set read-only
07:54:47 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',sma'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:47 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYRESDEC, @ANYBLOB=',sm'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

[ 2910.647866] FAT-fs (loop5): Filesystem has been set read-only
[ 2910.667776] FAT-fs (loop4): error, invalid access to FAT (entry 0x00007400)
[ 2910.690721] FAT-fs (loop5): error, invalid access to FAT (entry 0x00007400)
07:54:47 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00k\xbe\x05\x00', 0x1132})

07:54:47 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:54:47 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

[ 2910.704106] FAT-fs (loop5): error, invalid access to FAT (entry 0x00007400)
[ 2910.721639] FAT-fs (loop5): error, invalid access to FAT (entry 0x00007400)
[ 2910.739543] FAT-fs (loop5): error, invalid access to FAT (entry 0x00007400)
07:54:47 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x00\xfc\x00', 0x1132})

07:54:48 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:48 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00l\xbe\x05\x00', 0x1132})

07:54:48 executing program 0:
r0 = socket(0x200000000000011, 0x3, 0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip6gre0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0xe00)

07:54:48 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',sma'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

[ 2911.769825] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2911.795425] FAT-fs (loop2): Filesystem has been set read-only
07:54:48 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:54:48 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYRESDEC, @ANYBLOB=',sm'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

[ 2912.034899] FAT-fs (loop2): error, invalid access to FAT (entry 0x00007400)
[ 2912.086413] FAT-fs (loop2): error, invalid access to FAT (entry 0x00007400)
[ 2912.102449] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0)
07:54:49 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00m\xbe\x05\x00', 0x1132})

[ 2912.162382] FAT-fs (loop1): Filesystem has been set read-only
[ 2912.197287] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
07:54:49 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f12")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYRESDEC, @ANYBLOB=',euid=', @ANYRESDEC, @ANYBLOB=',smackfsdef=vfat\x00,\x00'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:49 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

[ 2912.244423] FAT-fs (loop1): error, invalid access to FAT (entry 0x00007400)
[ 2912.257186] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2912.262613] FAT-fs (loop1): error, invalid access to FAT (entry 0x00007400)
[ 2912.270540] FAT-fs (loop5): Filesystem has been set read-only
[ 2912.284390] FAT-fs (loop5): error, invalid access to FAT (entry 0x00007400)
[ 2912.292155] FAT-fs (loop5): error, invalid access to FAT (entry 0x00007400)
[ 2912.321526] FAT-fs (loop5): error, invalid access to FAT (entry 0x00007400)
[ 2912.368684] FAT-fs (loop5): error, invalid access to FAT (entry 0x00007400)
07:54:49 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',sma'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:49 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:54:49 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00n\xbe\x05\x00', 0x1132})

07:54:49 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:54:50 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYRESDEC, @ANYBLOB=',sm'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:50 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:50 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f12")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYRESDEC, @ANYBLOB=',euid=', @ANYRESDEC, @ANYBLOB=',smackfsdef=vfat\x00,\x00'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:50 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:50 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00o\xbe\x05\x00', 0x1132})

[ 2914.026039] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0)
07:54:50 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

[ 2914.131568] FAT-fs (loop1): Filesystem has been set read-only
[ 2914.416323] FAT-fs (loop1): error, invalid access to FAT (entry 0x00007400)
07:54:51 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

[ 2914.464119] FAT-fs (loop1): error, invalid access to FAT (entry 0x00007400)
07:54:51 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYRESDEC, @ANYBLOB=',euid=', @ANYRESDEC])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:51 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:51 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f12")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001e00,default_permissions,blksize=0x0000000000003000,uid=', @ANYRESDEC, @ANYBLOB=',euid=', @ANYRESDEC, @ANYBLOB=',smackfsdef=vfat\x00,\x00'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:51 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00p\xbe\x05\x00', 0x1132})

[ 2915.046083] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2915.110005] FAT-fs (loop4): Filesystem has been set read-only
[ 2915.214838] FAT-fs (loop4): error, invalid access to FAT (entry 0x00007400)
07:54:52 executing program 5:
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

[ 2915.270802] FAT-fs (loop4): error, invalid access to FAT (entry 0x00007400)
07:54:52 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00q\xbe\x05\x00', 0x1132})

07:54:52 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:52 executing program 4 (fault-call:1 fault-nth:0):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:54:52 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:52 executing program 0 (fault-call:1 fault-nth:0):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)

[ 2915.802159] FAULT_INJECTION: forcing a failure.
[ 2915.802159] name failslab, interval 1, probability 0, space 0, times 0
[ 2915.825094] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2915.913557] CPU: 0 PID: 28588 Comm: syz-executor.4 Not tainted 5.0.0-rc8+ #88
[ 2915.920910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2915.929980] FAT-fs (loop2): Filesystem has been set read-only
[ 2915.930450] Call Trace:
[ 2915.938943]  dump_stack+0x172/0x1f0
[ 2915.942585]  should_fail.cold+0xa/0x1b
[ 2915.946491]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 2915.951616]  ? lock_downgrade+0x810/0x810
[ 2915.955799]  ? ___might_sleep+0x163/0x280
[ 2915.959749] FAULT_INJECTION: forcing a failure.
[ 2915.959749] name failslab, interval 1, probability 0, space 0, times 0
[ 2915.959980]  __should_failslab+0x121/0x190
[ 2915.975416]  should_failslab+0x9/0x14
[ 2915.979240]  kmem_cache_alloc_node+0x264/0x710
[ 2915.983862]  __alloc_skb+0xd5/0x5e0
[ 2915.987510]  ? skb_scrub_packet+0x440/0x440
[ 2915.991868]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2915.997428]  ? netlink_autobind.isra.0+0x228/0x310
[ 2916.002378]  netlink_sendmsg+0x97b/0xd70
[ 2916.006460]  ? netlink_unicast+0x720/0x720
[ 2916.010707]  ? smack_socket_sendmsg+0xb1/0x1a0
[ 2916.015303]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2916.020870]  ? security_socket_sendmsg+0x93/0xc0
[ 2916.025642]  ? netlink_unicast+0x720/0x720
[ 2916.029893]  sock_sendmsg+0xdd/0x130
[ 2916.033629]  ___sys_sendmsg+0x806/0x930
[ 2916.037628]  ? copy_msghdr_from_user+0x430/0x430
[ 2916.042406]  ? lock_downgrade+0x810/0x810
[ 2916.046576]  ? kasan_check_read+0x11/0x20
[ 2916.050740]  ? __fget+0x367/0x540
[ 2916.054215]  ? iterate_fd+0x360/0x360
[ 2916.058037]  ? lock_downgrade+0x810/0x810
[ 2916.062240]  ? __fget_light+0x1a9/0x230
[ 2916.066236]  ? __fdget+0x1b/0x20
[ 2916.069612]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 2916.075178]  __sys_sendmsg+0x105/0x1d0
[ 2916.079084]  ? __ia32_sys_shutdown+0x80/0x80
[ 2916.083509]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2916.089064]  ? fput+0x128/0x1a0
[ 2916.092373]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 2916.097151]  ? do_syscall_64+0x26/0x610
[ 2916.101137]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2916.106600]  ? do_syscall_64+0x26/0x610
[ 2916.110601]  __x64_sys_sendmsg+0x78/0xb0
[ 2916.114690]  do_syscall_64+0x103/0x610
[ 2916.118605]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2916.123809] RIP: 0033:0x457e29
[ 2916.127035] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2916.145958] RSP: 002b:00007fc57768ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2916.153684] RAX: ffffffffffffffda RBX: 00007fc57768ec90 RCX: 0000000000457e29
[ 2916.160964] RDX: 0000000000000000 RSI: 0000000020001a80 RDI: 0000000000000003
[ 2916.168248] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 2916.175535] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc57768f6d4
[ 2916.182839] R13: 00000000004c54fc R14: 00000000004d93e0 R15: 0000000000000004
[ 2916.202711] CPU: 1 PID: 28596 Comm: syz-executor.0 Not tainted 5.0.0-rc8+ #88
[ 2916.210049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2916.210056] Call Trace:
[ 2916.210080]  dump_stack+0x172/0x1f0
[ 2916.210100]  should_fail.cold+0xa/0x1b
[ 2916.210118]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 2916.210134]  ? lock_downgrade+0x810/0x810
[ 2916.210152]  ? ___might_sleep+0x163/0x280
[ 2916.210172]  __should_failslab+0x121/0x190
[ 2916.229642]  should_failslab+0x9/0x14
[ 2916.229661]  kmem_cache_alloc_node+0x264/0x710
[ 2916.229688]  __alloc_skb+0xd5/0x5e0
[ 2916.229704]  ? skb_scrub_packet+0x440/0x440
[ 2916.229721]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2916.229739]  ? netlink_autobind.isra.0+0x228/0x310
[ 2916.239002]  netlink_sendmsg+0x97b/0xd70
[ 2916.239027]  ? netlink_unicast+0x720/0x720
[ 2916.239050]  ? smack_socket_sendmsg+0xb1/0x1a0
[ 2916.239066]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2916.239085]  ? security_socket_sendmsg+0x93/0xc0
[ 2916.247460]  ? netlink_unicast+0x720/0x720
[ 2916.247479]  sock_sendmsg+0xdd/0x130
[ 2916.247497]  ___sys_sendmsg+0x806/0x930
[ 2916.247516]  ? copy_msghdr_from_user+0x430/0x430
[ 2916.247541]  ? lock_downgrade+0x810/0x810
[ 2916.255934]  ? kasan_check_read+0x11/0x20
[ 2916.255956]  ? __fget+0x367/0x540
[ 2916.255975]  ? iterate_fd+0x360/0x360
[ 2916.255989]  ? lock_downgrade+0x810/0x810
[ 2916.256009]  ? __fget_light+0x1a9/0x230
[ 2916.263973]  ? __fdget+0x1b/0x20
[ 2916.263988]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 2916.264009]  __sys_sendmsg+0x105/0x1d0
[ 2916.264027]  ? __ia32_sys_shutdown+0x80/0x80
[ 2916.264041]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2916.264054]  ? fput+0x128/0x1a0
07:54:53 executing program 4 (fault-call:1 fault-nth:1):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2916.264077]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 2916.264090]  ? do_syscall_64+0x26/0x610
[ 2916.264109]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2916.274706]  ? do_syscall_64+0x26/0x610
[ 2916.274728]  __x64_sys_sendmsg+0x78/0xb0
[ 2916.274746]  do_syscall_64+0x103/0x610
[ 2916.274767]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2916.274778] RIP: 0033:0x457e29
07:54:53 executing program 5:
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

[ 2916.274801] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2916.274809] RSP: 002b:00007fcf5e6edc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2916.283177] RAX: ffffffffffffffda RBX: 00007fcf5e6edc90 RCX: 0000000000457e29
[ 2916.283186] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003
[ 2916.283193] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 2916.283201] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcf5e6ee6d4
[ 2916.283209] R13: 00000000004c54fc R14: 00000000004d93e0 R15: 0000000000000004
[ 2916.285892] FAT-fs (loop2): error, invalid access to FAT (entry 0x00007400)
[ 2916.363141] FAT-fs (loop2): error, invalid access to FAT (entry 0x00007400)
07:54:53 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:53 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:54:53 executing program 0 (fault-call:1 fault-nth:1):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)

07:54:53 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x2, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:54:53 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00r\xbe\x05\x00', 0x1132})

07:54:53 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',s'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

[ 2916.906652] FAULT_INJECTION: forcing a failure.
[ 2916.906652] name failslab, interval 1, probability 0, space 0, times 0
[ 2916.998630] CPU: 1 PID: 28622 Comm: syz-executor.0 Not tainted 5.0.0-rc8+ #88
[ 2917.005967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2917.015337] Call Trace:
[ 2917.017961]  dump_stack+0x172/0x1f0
[ 2917.021617]  should_fail.cold+0xa/0x1b
[ 2917.021637]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 2917.021657]  ? lock_downgrade+0x810/0x810
[ 2917.021679]  ? ___might_sleep+0x163/0x280
[ 2917.021704]  __should_failslab+0x121/0x190
[ 2917.021732]  should_failslab+0x9/0x14
[ 2917.043283]  kmem_cache_alloc_node_trace+0x270/0x720
[ 2917.043301]  ? __alloc_skb+0xd5/0x5e0
[ 2917.043321]  ? rcu_lockdep_current_cpu_online+0xe3/0x130
[ 2917.043349]  __kmalloc_node_track_caller+0x3d/0x70
[ 2917.043368]  __kmalloc_reserve.isra.0+0x40/0xf0
[ 2917.043387]  __alloc_skb+0x10b/0x5e0
[ 2917.043404]  ? skb_scrub_packet+0x440/0x440
[ 2917.043421]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2917.043441]  ? netlink_autobind.isra.0+0x228/0x310
[ 2917.052363]  netlink_sendmsg+0x97b/0xd70
[ 2917.052388]  ? netlink_unicast+0x720/0x720
[ 2917.052410]  ? smack_socket_sendmsg+0xb1/0x1a0
[ 2917.052427]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2917.052444]  ? security_socket_sendmsg+0x93/0xc0
[ 2917.052459]  ? netlink_unicast+0x720/0x720
[ 2917.052476]  sock_sendmsg+0xdd/0x130
[ 2917.052495]  ___sys_sendmsg+0x806/0x930
[ 2917.052514]  ? copy_msghdr_from_user+0x430/0x430
[ 2917.052533]  ? lock_downgrade+0x810/0x810
[ 2917.084930]  ? kasan_check_read+0x11/0x20
[ 2917.084949]  ? __fget+0x367/0x540
[ 2917.084968]  ? iterate_fd+0x360/0x360
[ 2917.084982]  ? lock_downgrade+0x810/0x810
[ 2917.085004]  ? __fget_light+0x1a9/0x230
[ 2917.085021]  ? __fdget+0x1b/0x20
[ 2917.085036]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 2917.085059]  __sys_sendmsg+0x105/0x1d0
[ 2917.085078]  ? __ia32_sys_shutdown+0x80/0x80
[ 2917.085094]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2917.094091]  ? fput+0x128/0x1a0
[ 2917.094117]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 2917.094133]  ? do_syscall_64+0x26/0x610
[ 2917.094149]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2917.094166]  ? do_syscall_64+0x26/0x610
[ 2917.125261]  __x64_sys_sendmsg+0x78/0xb0
[ 2917.125281]  do_syscall_64+0x103/0x610
[ 2917.125302]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2917.125314] RIP: 0033:0x457e29
[ 2917.125330] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2917.125342] RSP: 002b:00007fcf5e6edc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2917.145648] RAX: ffffffffffffffda RBX: 00007fcf5e6edc90 RCX: 0000000000457e29
[ 2917.145658] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003
[ 2917.145666] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 2917.145674] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcf5e6ee6d4
[ 2917.145683] R13: 00000000004c54fc R14: 00000000004d93e0 R15: 0000000000000004
07:54:54 executing program 0 (fault-call:1 fault-nth:2):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)

07:54:54 executing program 5:
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

[ 2917.550328] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2917.602693] FAULT_INJECTION: forcing a failure.
[ 2917.602693] name failslab, interval 1, probability 0, space 0, times 0
[ 2917.673343] CPU: 0 PID: 28641 Comm: syz-executor.0 Not tainted 5.0.0-rc8+ #88
[ 2917.680673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2917.690048] Call Trace:
[ 2917.692661]  dump_stack+0x172/0x1f0
[ 2917.696305]  should_fail.cold+0xa/0x1b
[ 2917.700217]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 2917.705340]  ? lock_downgrade+0x810/0x810
[ 2917.709503]  ? ___might_sleep+0x163/0x280
[ 2917.713676]  __should_failslab+0x121/0x190
[ 2917.717928]  should_failslab+0x9/0x14
[ 2917.719480] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2917.721745]  kmem_cache_alloc_node+0x264/0x710
[ 2917.721888]  ? xfrm_policy_insert+0x750/0x750
[ 2917.721912]  __alloc_skb+0xd5/0x5e0
[ 2917.721931]  ? skb_scrub_packet+0x440/0x440
[ 2917.721977]  ? vprintk_default+0x28/0x30
[ 2917.721998]  ? security_xfrm_policy_free+0x6c/0x90
[ 2917.722018]  xfrm_get_policy+0x5e3/0xb10
[ 2917.722041]  ? dump_one_policy+0x760/0x760
[ 2917.722062]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2917.722076]  ? __nla_parse+0x12a/0x340
[ 2917.722095]  ? nla_parse+0x45/0x60
[ 2917.722114]  ? dump_one_policy+0x760/0x760
[ 2917.722130]  xfrm_user_rcv_msg+0x458/0x770
[ 2917.722150]  ? xfrm_dump_sa_done+0xf0/0xf0
[ 2917.722172]  ? __lock_acquire+0x53b/0x4700
[ 2917.722213]  ? __mutex_lock+0x3cd/0x1310
[ 2917.722230]  ? xfrm_netlink_rcv+0x61/0x90
[ 2917.722255]  netlink_rcv_skb+0x17a/0x460
[ 2917.722272]  ? xfrm_dump_sa_done+0xf0/0xf0
[ 2917.722290]  ? netlink_ack+0xb50/0xb50
[ 2917.722322]  xfrm_netlink_rcv+0x70/0x90
[ 2917.722339]  netlink_unicast+0x536/0x720
07:54:54 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:54 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x3, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2917.722360]  ? netlink_attachskb+0x770/0x770
[ 2917.722376]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[ 2917.722393]  ? __check_object_size+0x3d/0x42f
[ 2917.722414]  netlink_sendmsg+0x8ae/0xd70
[ 2917.738433] FAT-fs (loop1): Filesystem has been set read-only
[ 2917.739321]  ? netlink_unicast+0x720/0x720
[ 2917.739345]  ? smack_socket_sendmsg+0xb1/0x1a0
[ 2917.739363]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2917.739381]  ? security_socket_sendmsg+0x93/0xc0
[ 2917.739397]  ? netlink_unicast+0x720/0x720
[ 2917.739416]  sock_sendmsg+0xdd/0x130
[ 2917.739434]  ___sys_sendmsg+0x806/0x930
[ 2917.739453]  ? copy_msghdr_from_user+0x430/0x430
[ 2917.739472]  ? lock_downgrade+0x810/0x810
[ 2917.865866]  ? kasan_check_read+0x11/0x20
[ 2917.865889]  ? __fget+0x367/0x540
[ 2917.873861]  ? iterate_fd+0x360/0x360
[ 2917.873876]  ? lock_downgrade+0x810/0x810
[ 2917.873897]  ? __fget_light+0x1a9/0x230
[ 2917.873911]  ? __fdget+0x1b/0x20
[ 2917.873925]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 2917.873946]  __sys_sendmsg+0x105/0x1d0
[ 2917.873964]  ? __ia32_sys_shutdown+0x80/0x80
[ 2917.873978]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2917.873992]  ? fput+0x128/0x1a0
[ 2917.874017]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 2917.874032]  ? do_syscall_64+0x26/0x610
[ 2917.874047]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2917.874064]  ? do_syscall_64+0x26/0x610
[ 2917.950445]  __x64_sys_sendmsg+0x78/0xb0
[ 2917.954533]  do_syscall_64+0x103/0x610
[ 2917.958440]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2917.963648] RIP: 0033:0x457e29
07:54:54 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x4, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2917.966870] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2917.985787] RSP: 002b:00007fcf5e6edc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2917.993528] RAX: ffffffffffffffda RBX: 00007fcf5e6edc90 RCX: 0000000000457e29
[ 2918.000809] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003
[ 2918.008105] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 2918.015392] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcf5e6ee6d4
07:54:54 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00s\xbe\x05\x00', 0x1132})

[ 2918.022678] R13: 00000000004c54fc R14: 00000000004d93e0 R15: 0000000000000004
07:54:54 executing program 0 (fault-call:1 fault-nth:3):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)

07:54:55 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x5, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2918.225797] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2918.270525] FAULT_INJECTION: forcing a failure.
[ 2918.270525] name failslab, interval 1, probability 0, space 0, times 0
[ 2918.293805] FAT-fs (loop1): error, invalid access to FAT (entry 0x00007400)
[ 2918.308402] CPU: 0 PID: 28666 Comm: syz-executor.0 Not tainted 5.0.0-rc8+ #88
[ 2918.315740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2918.325109] Call Trace:
[ 2918.327718]  dump_stack+0x172/0x1f0
[ 2918.331365]  should_fail.cold+0xa/0x1b
[ 2918.335279]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 2918.340406]  ? lock_downgrade+0x810/0x810
[ 2918.344571]  ? ___might_sleep+0x163/0x280
[ 2918.344594]  __should_failslab+0x121/0x190
[ 2918.344614]  should_failslab+0x9/0x14
[ 2918.344631]  kmem_cache_alloc_node_trace+0x270/0x720
[ 2918.344648]  ? __alloc_skb+0xd5/0x5e0
[ 2918.344666]  ? rcu_lockdep_current_cpu_online+0xe3/0x130
[ 2918.344684]  __kmalloc_node_track_caller+0x3d/0x70
[ 2918.362333]  __kmalloc_reserve.isra.0+0x40/0xf0
[ 2918.362351]  __alloc_skb+0x10b/0x5e0
[ 2918.362367]  ? skb_scrub_packet+0x440/0x440
[ 2918.362384]  ? vprintk_default+0x28/0x30
[ 2918.362403]  ? security_xfrm_policy_free+0x6c/0x90
[ 2918.362422]  xfrm_get_policy+0x5e3/0xb10
[ 2918.362445]  ? dump_one_policy+0x760/0x760
[ 2918.362464]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
07:54:55 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x6, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2918.362478]  ? __nla_parse+0x12a/0x340
[ 2918.362496]  ? nla_parse+0x45/0x60
[ 2918.362513]  ? dump_one_policy+0x760/0x760
[ 2918.362529]  xfrm_user_rcv_msg+0x458/0x770
[ 2918.362548]  ? xfrm_dump_sa_done+0xf0/0xf0
[ 2918.362572]  ? __lock_acquire+0x53b/0x4700
[ 2918.362612]  ? __mutex_lock+0x3cd/0x1310
[ 2918.362628]  ? xfrm_netlink_rcv+0x61/0x90
[ 2918.362653]  netlink_rcv_skb+0x17a/0x460
[ 2918.362670]  ? xfrm_dump_sa_done+0xf0/0xf0
[ 2918.402614]  ? netlink_ack+0xb50/0xb50
[ 2918.402648]  xfrm_netlink_rcv+0x70/0x90
[ 2918.402665]  netlink_unicast+0x536/0x720
[ 2918.402684]  ? netlink_attachskb+0x770/0x770
[ 2918.418978]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[ 2918.418996]  ? __check_object_size+0x3d/0x42f
[ 2918.419020]  netlink_sendmsg+0x8ae/0xd70
[ 2918.419043]  ? netlink_unicast+0x720/0x720
[ 2918.419067]  ? smack_socket_sendmsg+0xb1/0x1a0
[ 2918.419084]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2918.419102]  ? security_socket_sendmsg+0x93/0xc0
[ 2918.419118]  ? netlink_unicast+0x720/0x720
[ 2918.419136]  sock_sendmsg+0xdd/0x130
[ 2918.430804]  ___sys_sendmsg+0x806/0x930
[ 2918.430833]  ? copy_msghdr_from_user+0x430/0x430
[ 2918.443532]  ? lock_downgrade+0x810/0x810
[ 2918.443552]  ? kasan_check_read+0x11/0x20
[ 2918.443569]  ? __fget+0x367/0x540
[ 2918.443587]  ? iterate_fd+0x360/0x360
[ 2918.443599]  ? lock_downgrade+0x810/0x810
[ 2918.443620]  ? __fget_light+0x1a9/0x230
[ 2918.443636]  ? __fdget+0x1b/0x20
[ 2918.443654]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 2918.468035]  __sys_sendmsg+0x105/0x1d0
[ 2918.468054]  ? __ia32_sys_shutdown+0x80/0x80
[ 2918.468072]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2918.468088]  ? fput+0x128/0x1a0
[ 2918.468114]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 2918.468129]  ? do_syscall_64+0x26/0x610
[ 2918.468145]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2918.468160]  ? do_syscall_64+0x26/0x610
[ 2918.468179]  __x64_sys_sendmsg+0x78/0xb0
[ 2918.517326]  do_syscall_64+0x103/0x610
[ 2918.517347]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2918.517360] RIP: 0033:0x457e29
07:54:55 executing program 0 (fault-call:1 fault-nth:4):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)

[ 2918.517376] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2918.517384] RSP: 002b:00007fcf5e6edc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2918.517399] RAX: ffffffffffffffda RBX: 00007fcf5e6edc90 RCX: 0000000000457e29
[ 2918.517408] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003
[ 2918.517420] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 2918.545850] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcf5e6ee6d4
07:54:55 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',s'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:55 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x8, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2918.545861] R13: 00000000004c54fc R14: 00000000004d93e0 R15: 0000000000000004
[ 2918.672420] FAT-fs (loop5): error, invalid access to FAT (entry 0x00007400)
[ 2918.700487] FAT-fs (loop5): Filesystem has been set read-only
[ 2918.724856] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2918.785493] FAULT_INJECTION: forcing a failure.
[ 2918.785493] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2918.797347] CPU: 0 PID: 28677 Comm: syz-executor.0 Not tainted 5.0.0-rc8+ #88
[ 2918.804640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2918.814012] Call Trace:
[ 2918.816627]  dump_stack+0x172/0x1f0
[ 2918.820278]  should_fail.cold+0xa/0x1b
[ 2918.824191]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 2918.829331]  should_fail_alloc_page+0x50/0x60
07:54:55 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x9, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2918.833864]  __alloc_pages_nodemask+0x1a1/0x710
[ 2918.838562]  ? do_syscall_64+0x103/0x610
[ 2918.842645]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2918.848032]  ? __alloc_pages_slowpath+0x2900/0x2900
[ 2918.848066]  cache_grow_begin+0x9c/0x8c0
[ 2918.848083]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 2918.848100]  ? check_preemption_disabled+0x48/0x290
[ 2918.848122]  kmem_cache_alloc_node_trace+0x658/0x720
[ 2918.848149]  __kmalloc_node_track_caller+0x3d/0x70
[ 2918.848169]  __kmalloc_reserve.isra.0+0x40/0xf0
[ 2918.848186]  __alloc_skb+0x10b/0x5e0
[ 2918.886290]  ? skb_scrub_packet+0x440/0x440
[ 2918.890633]  ? vprintk_default+0x28/0x30
[ 2918.894728]  ? security_xfrm_policy_free+0x6c/0x90
[ 2918.899685]  xfrm_get_policy+0x5e3/0xb10
[ 2918.903777]  ? dump_one_policy+0x760/0x760
[ 2918.908040]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2918.913605]  ? __nla_parse+0x12a/0x340
[ 2918.917515]  ? nla_parse+0x45/0x60
[ 2918.921074]  ? dump_one_policy+0x760/0x760
[ 2918.925327]  xfrm_user_rcv_msg+0x458/0x770
[ 2918.929618]  ? xfrm_dump_sa_done+0xf0/0xf0
[ 2918.933888]  ? __lock_acquire+0x53b/0x4700
[ 2918.938170]  ? __mutex_lock+0x3cd/0x1310
[ 2918.942256]  ? xfrm_netlink_rcv+0x61/0x90
[ 2918.946433]  netlink_rcv_skb+0x17a/0x460
[ 2918.950526]  ? xfrm_dump_sa_done+0xf0/0xf0
[ 2918.954783]  ? netlink_ack+0xb50/0xb50
[ 2918.954816]  xfrm_netlink_rcv+0x70/0x90
[ 2918.954833]  netlink_unicast+0x536/0x720
[ 2918.954860]  ? netlink_attachskb+0x770/0x770
[ 2918.971174]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[ 2918.971194]  ? __check_object_size+0x3d/0x42f
[ 2918.971216]  netlink_sendmsg+0x8ae/0xd70
[ 2918.971238]  ? netlink_unicast+0x720/0x720
[ 2918.971260]  ? smack_socket_sendmsg+0xb1/0x1a0
[ 2918.971274]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2918.971292]  ? security_socket_sendmsg+0x93/0xc0
[ 2918.971310]  ? netlink_unicast+0x720/0x720
[ 2919.008234]  sock_sendmsg+0xdd/0x130
[ 2919.011978]  ___sys_sendmsg+0x806/0x930
[ 2919.015984]  ? copy_msghdr_from_user+0x430/0x430
[ 2919.020784]  ? lock_downgrade+0x810/0x810
[ 2919.025005]  ? kasan_check_read+0x11/0x20
[ 2919.029184]  ? __fget+0x367/0x540
[ 2919.032664]  ? iterate_fd+0x360/0x360
[ 2919.036478]  ? lock_downgrade+0x810/0x810
[ 2919.040661]  ? __fget_light+0x1a9/0x230
[ 2919.044649]  ? __fdget+0x1b/0x20
[ 2919.048026]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 2919.053583]  __sys_sendmsg+0x105/0x1d0
[ 2919.057486]  ? __ia32_sys_shutdown+0x80/0x80
[ 2919.061911]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2919.067466]  ? fput+0x128/0x1a0
[ 2919.070770]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 2919.075549]  ? do_syscall_64+0x26/0x610
[ 2919.079543]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2919.084938]  ? do_syscall_64+0x26/0x610
[ 2919.088949]  __x64_sys_sendmsg+0x78/0xb0
[ 2919.093033]  do_syscall_64+0x103/0x610
[ 2919.096950]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2919.102155] RIP: 0033:0x457e29
[ 2919.105360] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2919.124273] RSP: 002b:00007fcf5e6edc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
07:54:56 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0xa, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2919.131992] RAX: ffffffffffffffda RBX: 00007fcf5e6edc90 RCX: 0000000000457e29
[ 2919.139275] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003
[ 2919.146561] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 2919.153852] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcf5e6ee6d4
[ 2919.161134] R13: 00000000004c54fc R14: 00000000004d93e0 R15: 0000000000000004
[ 2919.272444] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2919.280338] FAT-fs (loop1): Filesystem has been set read-only
[ 2919.311804] FAT-fs (loop1): error, invalid access to FAT (entry 0x00007400)
07:54:56 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(0x0, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

[ 2919.324150] FAT-fs (loop1): error, invalid access to FAT (entry 0x00007400)
07:54:56 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0xb, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:54:56 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:54:56 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00t\xbe\x05\x00', 0x1132})

07:54:56 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',s'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:56 executing program 0 (fault-call:1 fault-nth:5):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)

07:54:56 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0xe, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2919.546928] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
07:54:56 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0xf, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2919.611493] FAULT_INJECTION: forcing a failure.
[ 2919.611493] name failslab, interval 1, probability 0, space 0, times 0
[ 2919.661660] CPU: 0 PID: 28718 Comm: syz-executor.0 Not tainted 5.0.0-rc8+ #88
[ 2919.669008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2919.678377] Call Trace:
[ 2919.680985]  dump_stack+0x172/0x1f0
[ 2919.684635]  should_fail.cold+0xa/0x1b
[ 2919.688544]  ? __kasan_kmalloc.constprop.0+0xcf/0xe0
[ 2919.693667]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 2919.698787]  ? netlink_rcv_skb+0x17a/0x460
[ 2919.703050]  ? xfrm_netlink_rcv+0x70/0x90
[ 2919.707217]  ? netlink_unicast+0x536/0x720
[ 2919.711476]  ? netlink_sendmsg+0x8ae/0xd70
[ 2919.715726]  ? sock_sendmsg+0xdd/0x130
[ 2919.719630]  ? ___sys_sendmsg+0x806/0x930
[ 2919.723799]  ? __sys_sendmsg+0x105/0x1d0
[ 2919.727897]  ? __x64_sys_sendmsg+0x78/0xb0
[ 2919.732161]  __should_failslab+0x121/0x190
[ 2919.736618]  should_failslab+0x9/0x14
[ 2919.736636]  kmem_cache_alloc_node_trace+0x5a/0x720
[ 2919.736663]  __kmalloc_node_track_caller+0x3d/0x70
[ 2919.736684]  __kmalloc_reserve.isra.0+0x40/0xf0
[ 2919.736705]  pskb_expand_head+0x14e/0xdd0
[ 2919.736720]  ? nla_put+0x110/0x150
[ 2919.736746]  netlink_trim+0x215/0x270
[ 2919.766766]  netlink_unicast+0xbf/0x720
[ 2919.770757]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2919.776317]  ? netlink_attachskb+0x770/0x770
[ 2919.780753]  ? vprintk_default+0x20/0x30
[ 2919.784833]  ? security_xfrm_policy_free+0x6c/0x90
[ 2919.789786]  xfrm_get_policy+0x6dc/0xb10
[ 2919.789812]  ? dump_one_policy+0x760/0x760
[ 2919.789833]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2919.789855]  ? __nla_parse+0x12a/0x340
[ 2919.789875]  ? nla_parse+0x45/0x60
07:54:56 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x10, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2919.789894]  ? dump_one_policy+0x760/0x760
[ 2919.789910]  xfrm_user_rcv_msg+0x458/0x770
[ 2919.789928]  ? xfrm_dump_sa_done+0xf0/0xf0
[ 2919.823879]  ? __lock_acquire+0x53b/0x4700
[ 2919.828165]  ? __mutex_lock+0x3cd/0x1310
[ 2919.832256]  ? xfrm_netlink_rcv+0x61/0x90
[ 2919.836429]  netlink_rcv_skb+0x17a/0x460
[ 2919.840515]  ? xfrm_dump_sa_done+0xf0/0xf0
[ 2919.844775]  ? netlink_ack+0xb50/0xb50
[ 2919.848701]  xfrm_netlink_rcv+0x70/0x90
[ 2919.852697]  netlink_unicast+0x536/0x720
[ 2919.852718]  ? netlink_attachskb+0x770/0x770
[ 2919.852733]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[ 2919.852750]  ? __check_object_size+0x3d/0x42f
[ 2919.852772]  netlink_sendmsg+0x8ae/0xd70
[ 2919.852795]  ? netlink_unicast+0x720/0x720
[ 2919.852817]  ? smack_socket_sendmsg+0xb1/0x1a0
[ 2919.852833]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2919.852859]  ? security_socket_sendmsg+0x93/0xc0
[ 2919.852875]  ? netlink_unicast+0x720/0x720
[ 2919.852893]  sock_sendmsg+0xdd/0x130
[ 2919.852911]  ___sys_sendmsg+0x806/0x930
[ 2919.852931]  ? copy_msghdr_from_user+0x430/0x430
[ 2919.852952]  ? lock_downgrade+0x810/0x810
[ 2919.852971]  ? kasan_check_read+0x11/0x20
[ 2919.852991]  ? __fget+0x367/0x540
[ 2919.853010]  ? iterate_fd+0x360/0x360
[ 2919.853026]  ? lock_downgrade+0x810/0x810
[ 2919.875066]  ? __fget_light+0x1a9/0x230
[ 2919.875084]  ? __fdget+0x1b/0x20
[ 2919.875101]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 2919.875123]  __sys_sendmsg+0x105/0x1d0
[ 2919.875141]  ? __ia32_sys_shutdown+0x80/0x80
[ 2919.875157]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2919.875173]  ? fput+0x128/0x1a0
[ 2919.875196]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 2919.915201]  ? do_syscall_64+0x26/0x610
[ 2919.915217]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2919.915232]  ? do_syscall_64+0x26/0x610
[ 2919.915256]  __x64_sys_sendmsg+0x78/0xb0
[ 2919.915274]  do_syscall_64+0x103/0x610
[ 2919.915294]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2919.915307] RIP: 0033:0x457e29
[ 2919.915323] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2919.915332] RSP: 002b:00007fcf5e6edc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2919.915357] RAX: ffffffffffffffda RBX: 00007fcf5e6edc90 RCX: 0000000000457e29
[ 2919.943747] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003
[ 2919.943758] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 2919.943767] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcf5e6ee6d4
[ 2919.943776] R13: 00000000004c54fc R14: 00000000004d93e0 R15: 0000000000000004
07:54:56 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x11, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:54:57 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x12, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:54:57 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(0x0, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:57 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00u\xbe\x05\x00', 0x1132})

07:54:57 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:54:57 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',sm'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:57 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x13, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:54:57 executing program 0 (fault-call:1 fault-nth:6):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)

07:54:57 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x60, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:54:57 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0xf0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:54:57 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00v\xbe\x05\x00', 0x1132})

07:54:57 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x300, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:54:57 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)

07:54:57 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x500, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:54:58 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(0x0, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:58 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x600, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:54:58 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:54:58 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',sm'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:58 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vlan0\x00', <r1=>0x0})
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f00000001c0)=0xe8)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc))
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000002c0)=0x2)
read(r4, 0x0, 0x0)
dup3(r4, r3, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)=@updsa={0x1294, 0x1a, 0x800, 0x70bd26, 0x25dfdbfd, {{@in=@local, @in6=@remote, 0x4e21, 0x10000, 0x4e24, 0x4, 0x2, 0xa0, 0xa0, 0x0, r1, r2}, {@in=@loopback, 0x4d6, 0xff}, @in=@loopback, {0x31fb2aa1, 0x8851, 0x9, 0x4, 0x6, 0x1f, 0x5, 0x100000001}, {0x8, 0x0, 0xfffffffffffffff7, 0x6}, {0x1, 0x2, 0x7}, 0x70bd28, 0x3500, 0xa, 0x4, 0x3, 0x40}, [@policy_type={0xc}, @sec_ctx={0xd4, 0x8, {0xd0, 0x8, 0x1, 0x9b3b, 0xc8, "fef58791ef1de6551e7db488fae3e7150965bb8100ccc94702b9c9221c40befcf246e9f5c2aed26b5faa903b352f7b9bc5fb838e56ba3e7cbd3b32e3a1fe0dd69345426ed8a9af15b80583ba41735984e7fddf1b20d4cedbcaf9fc6b996704f46bfbe5d101048a0a1c70591d89c76e04a6bf59665feea596846ad06feb9e5ed4250acc5928c2f7f481b14e6da678401a3adcb755e7f097b8761f6608da60679c8adcbfeebf9c3b48a73406a9a4085c769533fae6af588920d4baa535e5d25326629e9ac04ddbb0eb"}}, @replay_val={0x10, 0xa, {0x70bd27, 0x70bd2b, 0x7}}, @output_mark={0x8, 0x1d, 0x80000000}, @algo_comp={0x48, 0x3, {{'lzjh\x00'}}}, @coaddr={0x14, 0xe, @in6=@loopback}, @etimer_thresh={0x8, 0xc, 0xa81}, @algo_comp={0x1048, 0x3, {{'lzs\x00'}, 0x8000, "65e524a100486f8838764a64076206256eb951c6c47106b70e5c6b097d591db69135533da64831ffbf1b1fc5feccac6796a7546aac70bc4eef832767b5ec98f864a0273f1a2322fab5b7da2c80679ef4338103bd1fb8426dc74ec78659f3cdf00cbd85fb688635ad22570fe068353b90e8081f0f159907ab1dff7018bb75c3342109750a235fb9f12f98c4a173f9a9672dda7ccb598ccb42829e9b7413cdae760694835471d524bf4426227987a235b30abd0a12ed2509de927adf81c003e00cbf4930c91764ab4b22ddc3f5a28be82bf4167c7d7d70e3f8ca30b13b7d7f3eef4bb93626548f35998e549455ae84ebbe8d0faab3b47877176c3416e64ac6f80aa62d71782871a8c88085c5d21cf8e0f24498dac4e67fea9050b069ac07db6895d9eb9302221a54a397abfc957784f1b77f60b4cd891414e91b4445a9e6ae9d600213b125e27f509c3145f5aeb1a2e9c64f69fe7d8b566d2a0afbe9037b7274f8204e918321e8b738f5593ee56dae124ba595b769e37d909a69a457dcaaaf38f55a0a2460cd128b4d9413c21feb26d56dc55c3fa585bf25b474beee7fe0efb7e49a107c7bd930201084f07745232885b3fac0d6f6aef6bd229e6047f747636c2eb075567216e19105c4637ce30cca1f5065ddd2f8371b0b6aa4893cb29b391052fc64021adc5195eec4245874337100ef3db860af666ec91250e43b84ec66fa0a2496e90b1b510254d65bf4b221936d2c104fd279d59e07dbc267351d5c3dcd9a98797eac170de2892b11fd455df2392d1bcba47cbfc8735b16cc63c9a30c28c40cfab93e9b1670fa88829779c1a70c88d00c845e7490566966f059ad353cc74fac730bffc6fbdea5a15560f1658198e2b1711555f5279fc5946063bb3e8a65a381f8d25eb1147d4fb6896956a85717cf9caf75d0d189617ad1bb7b770b831e390eed9c5ac9a8b9da6c4fea6fe67ee4ea659ece9c341b9de85f4b77d038f11992707fbc3e7de3a4df79ae40b02c83f45537cf846b0b1e8daf05357c3758d0ff415adbe7f658f10c3b03682bb0ac45a13e2d79305ca6a793188c60986c41e1e80783c10dd1858b2e0d38735ec326221a04c72fa8d731253094cfb5dcb4b6029f2d754118e9de80e929b9855dd7a94468c1b114f7fb1cfb05adb9dc4d7ac49be284e652f2f80cf56102afab21114e8fcbb6d3b6ae6eb6132ddd2e9f68e23fb9b1b2b54185acd01c58d7ef2bc376a5152e0be88738f17fb08c2f560b0167cdce1772cd4574377049cb377091f5da403041e40435c65c73c5fd9894fb33500545b71ae24ed45850212593c0c76a2c19f44a6ea30d6a28b036d3c4d6565365e15b770538f622ef84eb5492429d31e47e4b3dbe2728e8a0bb0e7e0d83d18aeb6065784e605b2f527e966c22c2c754675e2e3dc59e9a816db57da581f9f2e70ba063293c4ea9f5098cc7b8180803a5bc94c794e3c85ab8bcc742adcc6d806aa5269350ca7a1ea1bfb9c22af4f84c98e97fd653050a48395005eaeb8db2f638f911b9976426b42fd34db2e9c9d1125180ecc48a203d47025867d507b2e6eb300e77489af04dbdc2cac0b868033823518a75ade5c10287bb5a4bd7f81b3f24491fb372b0c785663450fe6139b74053505f5a07fb323d72c23400e3a5e203d35b99e769f54edfbe736272e4bf861a2b75f4f711ce872667ad48e8a68b8c8319749f69e143f6e1ae0c30238fdc75193648b8e77a3e28774d4c171723b1e9f3a5596f6fe3eebfb6fa879ab4395d3597ed273342773415fed52c00dcdf113dde3d3e60ea7c684cb23bf44b156f5812d1e361ce8a854e8fda1d4529252aaf186380d4deaead590563849836a06c22277aae3097281ae8879aff8aacde46722f297484f1b97f18ade1f13f91411125eef6dda7e43eb2f7c4dd5610d67be0ca752a6a7e9261d5cb0ee24b1987e495e2402644ae5630924d611ff695f3eff04d38b915d8088c15db5b021b7099db3400b2a19cfcf3641c3461db7c62514b030ff3938dce14fb3c8ce2852f6ace2961e5548d24e5a928b220c9058d2c2a759fc1ee25830eb5ada8c483c8ac147d65417e7ab8478f1ab598ed2c7d1aa08be0afbe32811b9d1587feec0c6eeb85bc61e35a217be87f99a0b1c8f3f47d56fa60b2d1f130ca3d2d79f9911764d22d7c220272d105486a585535ea0b591c63a581e9342f6824484329018a8686fd0dc91579bdf1b59565522aeb6b812e4b2554441e79a5f8059a90fda16949e3c95108434a6934f67edce220f744b748625ef50fe7931fe1dde9484768ef466dd2609d9d33f8d379d0261359f6b893689a08e0ca926150c090ead4ea815cc780c0b64eb61ae4458452fe57dee01be5a43b6c7584c6c2b3a8d9960dacfb815b160b4faf0334cde005e40ebbd9865dca298788d1a33114cc3fbd325df2c2a26d87c758ece3dea3fa11770d83629369c70b83065f545d5cbd9e0267438d655f7292b16a9eed1a66ff86d17af71c8231297e311f859f06c65df5d682660296ffa7b168dfc9de1f39eb1da6be343f4780b87e111b1623ad8ff6eb79e8d33a992bccba664d87345e5e4d65b1dd2fbe672a01d4d21425edc663b0960e04d43618aa227bb5e6d98da25310922039dc0831b7671e10ca2ee75488477235dec75f8843f7f23cad746568fa650243ab73cd95f7ca64b2fc85c84c4b5c544dafd4c0b3fc1b1801d1a84decbadcfff12813eed308f6c60a6c949528490eba0943b7d6f68efcd7e3cdae87aab5b99050bdd5c0a4bf5fb227e1cb8fceaaf84a83777090a5953f15420f6d6786713a11ed1463ef4024c1631cba48dd30165c0fe97f9a993dee6ce27c1de194550ffd5a9af5cb5fc2c73aeef402b5a2fc0efa8c55e67634a865b659e80049e7855a5482db80aa19225f0534dd935568a00e5e6e2b5b6cdc04cb4964938f8057a127473e7b939e6b27c5a9e65af12e36f290e06803c6642eaa7399ed598f750947e8de9916a8a585ff0b9f9fd1b0468c5e9384dacf4eb2d69a491b3a4c8ded305a258d90dc8e33fc4a939c1456e22f5e9997638a4b87d574581c7ec7727c11ff853e01f1b9a0d9c02c342b673d5615c6c692b3e1998226b5571cecc01812afdefe5c408c96eb64ae1badd65f36d9dd951bc996977a98053dafeb2c3212c47ffe88a223c87196d1664939fdd91d23daffc8d732cbfbc2ffe44b07a482196b7162c1769bae0e415e7ab42393a84ef2a2a85708b8d7f0a7a2c7e11ddd463ea406ea70dd13df9b10c0fc91728f3ee1baa37afb519a12b538736dbc90e6cc8dca76330c9b20d67cafbeff46cbd7cd6bf2e3ddb35fc64aa5be2104ca99575b51f9df489cf117b1e3fbe3e75fd4f1ca0ddf2f7ccfa5deb51b7dab3b85a6bd087e9b8f66c54ab02a99038dfa5752c82d5562b09ac050100678b0c8cc28174e0361dd168dbde6fc14677b453c9f5af151dc9769d86336d510f68dd7f26b4fafe14d17e3b71ad725d31a758a576cbf3bfc8b46f9046746cf756a5d4becf212a0130cab3e459080ccda43ed659a357a50df2e988ccc4ae5f67078465784636451ffaac670c7b9a5d624f40fb0d2ed42ceafefad0099abd030a4f2c6185409b0fa7676fc7a4c5d10990894c568478640cf05270934d594682797560ba16591d088d24d4e212aec356388271827b3927ef30387d5a7a74969aa0a561748fceeb2ae53eb4d8739edb1b9603f711ee3cb05884c5e079cdc56967e6c985a2f8b4d152ddaca56c6b4d62328b936c696cd9b8adb9b9bd304307424b9dc8606e091c5a0b75bbcd5b952c2078e8c9a161cf091d2fea9f48f14081e9d4f00dacca9f0b038474be051a0b1c142cfebb89c13d6fe0bee819294a3424b9fb2f422cd4b24a188f9878978775429f4d6ac049e5996808f26f6f53c09d7dcf30a17611862beb7b341c25b4098120a4cd7af10510684b88ecc8f55c08c37596d876fa61ac408efd903e6c19f8cfff5ec5cc78f56743302df0f314f53929516f4a813a199031832b372e2caa608bc77b730982e2772ea9e8faaa6f5274eea011e015f4a26fc73ba37000c6ef837691ee517b94bb492fc1f815afd468df5de41a688a908e238ff01a94bc7f065f10cb96a75197d5956c1fedc530f946ed0c1067135ddf2a934535e82576865120710cb94fa368b4406265c9c6e224ea0b36db18852344abb1ae78ae92d4fa3d4d8b0fa354f33fbbeb408c4a102542a0fcd6f569ff7eb6863d8997cbb136d1c21fa698dfcca4cf8afc7a27769b64eea3a1337a43afa4e5ccd6a82adce9287d40bcac6bdd9087292a7550118a8051d59c519fc48df5ccd3de74372d368701aa73978a70e7e41a2e5307231c82ad68e2dbba3f445c562c724db426746a2f21cdc8d982316e2cfeb01063438928293a07b567253a26d28a8de85abd54ff08e556c66ee0890d842f56efbf8e9b689e6efba6e91e3394e890a7f64099bad1af8d0f9c0da53efdbaf1d6f7029bf3fd1ae73d1243a8674e101cc251fbee79187aea15db699bcf76af95cf5195cc6d15185df3d0cb95179769e514dd341f4d90af0596fd5d9a11f6be992a5699fe6ec12368c573fb02f4779a2e78d2a49011ef27bcdaaf1c4a4937e592db2ff3173245856af4120526f8d46d85052d9408d432fc47224a48dd63f33c7956578bdfc54ab778717e814e8640dd9e33f3b9705395ff3e56ff976da3e18cb156a50be427ec2e902ae4a7bc347c173636f315513bac1b26006a40fcde81b7166657e71c3f66c99e759e664751721f9300363c5ebecd344efe114697da0791d39fae50a64641c80e415f99e48751748e90f3304e8c3b96fa78f476d87cf96151961f4970b7abd4c48248c56f04797ef50b772895c73b2b37819d9e1b23ea57930f4970a5d773c2da4c9aca19adbf8c94483f28d17fdd15ef3d77576d736912fea05e0d06176340736e765b41b47a814f274de69a09038da27f1494b6a9abd932041e3eb48de7201103b7bb2cb16c95c4bd6e6538ff57bc0bbc149311e04877d639558ff9d2ab1511212d8123f5f91671151805f47e681fb1a5bf0990f1eb340d4a1f3445ba63cb41df53d69cd7a3504347942e93afd92300624a9b309bf110d6c1237d4cd7c70109d9a19dcb408e369cd33d0001e9188f46ef323ad224f1f938cd75865dd94f1f19eb4fa10b25cfc465a213e58ddccd436271d8da1adc6b6b92e198164cc139a479c63323bb34c325e3af4a45bddae6dda28d6bdb06cd21682f057ebab1bdf06532fcf8c2d8320674d58b6a06d594e06919a0bb7b431731eee373f7cdc43a0e3c119626959b026bf9cae4e0f7b7e7c6f0401f7c1b8a4f6f6c583639e9ea9713facab4c2cd0c04b9c8ab83f00cb7dcf8c135fc7d437aa351025526533ac24e17a5afec87b9aab94a3d9cb37d64dd9a81b0bc1e8ec7931aa48230d7bf0664c5a1c0d535a0c1fe188c19bcdffebf5624e22095f0eb9e2fd4cd363b634aab50e92544172277619415098625f4553c417fc40e2354128ef1be7cf78cf46f0cd54ca090f0b57070c112f2902d3c86f5d9e3d87d760982bd54fca2812b1abdf80d69fb6d6e5719951e86e3a19295f6f941f8ec5fa4d4173ff24cebe98c3b86667514a4754330e3b33c78dcc4786541cd797ee23f534443909cdfc3da0483ec004d176ceeaa794a9ff2948bb07fd6b4364a0fd108b5061d0f129463cd8fda3e61bf63bc8b8298e4db1003be6467cf6ecfa115b25b8c6852dde0e65c5cc7e4f495d43b9fd31dc0b686f13a3fe54a944f24baaf63f6e"}}]}, 0x1294}, 0x1, 0x0, 0x0, 0x40080}, 0x805)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uhid\x00', 0x2, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000150001000000000000000000ff01000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xb8}}, 0x0)

07:54:58 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x900, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2921.560393] serio: Serial port pts5
07:54:58 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0xa00, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2921.655338] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
07:54:58 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00w\xbe\x05\x00', 0x1132})

[ 2921.762359] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
07:54:58 executing program 0:
prctl$PR_SET_SECUREBITS(0x1c, 0x1)
socket$nl_xfrm(0x10, 0x3, 0x6)

07:54:58 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0xb00, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:54:58 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000440)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}, &(0x7f0000000480)=0x10)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000280)={<r3=>0x0, 0xc5, "01f92c499014ef9e3d3592ee6282c152fcf3682f3309500e11b84affc91906474f5e452bba4039f6fd0de399c15c80ae3b16fb5c42238e197a34f22ce694eae29e388fa1d889c133fb1908baa28df635b669d716c2091dc17ceb3b409764df7ce4fe1c3989319be928eff764be097bcb8722a723693ac1220191c5ba638a260fb85d953f77b9f4a15b9317c617d02740ee4e81443b06c82b495cc637d8e9475ed1d26a48404bae79c714e3b624eed670bbcd3cefe9c29044695b2b2c760b78c5ed43232217"}, &(0x7f0000000380)=0xcd)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000003c0)={0x9, 0xa, 0x7fff, 0xfffffffeffffffff, r3}, &(0x7f0000000400)=0x10)
signalfd(r1, &(0x7f00000004c0)={0x7}, 0x8)
getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000240), &(0x7f0000000040)=0x1e7)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef90000000000000000000000000000000000000088067202a2a51d718bf3951a1a20d0bdfa8f25a311f97ca62c60343c119f9f6295671e270707388bcc94b984f8da3eb64857bb5d82e621581fdfb9f96c89dfc2aa2f54eb66ca4398c186979dd1a6adf508343557c6e002e9207fcf10773a44acef839d833e8852b6f392d0e4197e781cd19fec60b2b1fe75b21d821ebca3ac494b983c94c099e231913694252136eb8db858d19ccdef7990d973dcee2785b43312b149b3df40feb79f439d36898d023609df902b6c65c25628d420dc7d680360e8affb1a27f3ba08ecfa846e4aab1b25e452d87d560329c0a29833"], 0x4}}, 0x0)

07:54:59 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0xe00, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:54:59 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

07:54:59 executing program 0:
r0 = syz_open_dev$mouse(&(0x7f0000001400)='/dev/input/mouse#\x00', 0xbfa5, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001480)='TIPCv2\x00')
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000000)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x50800}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x2c, r1, 0x81f, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0xa36aefd641b9f05c)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x2c9, &(0x7f00000bfff0)={&(0x7f00000000c0)=@flushpolicy={0x0, 0x1d, 0xc, 0x70bd28, 0x25dfdbff, "", [@algo_comp={0x0, 0x3, {{'lzs\x00'}, 0x0, "a8258c7dcc257e3ea0cafa0c898ac88a88c0fde9b8022a4dc700a1bb279cec69a87e24e4b3adc2d6bfb712eeadc24af1d4d881f3e0f435c6703d27623d5bcae587"}}, @replay_esn_val={0x0, 0x17, {0x0, 0x70bd28, 0x70bd2a, 0x70bd26, 0x70bd27, 0x3ff, [0x5, 0xda3d, 0x6, 0x4, 0xc6fb, 0x2, 0x9]}}, @coaddr={0x0, 0xe, @in=@empty}, @encap={0x0, 0x4, {0xfffffffffffffffe, 0x4e24, 0x4e20, @in=@broadcast}}]}, 0xb8}}, 0x0)

07:54:59 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000040)="0adc1f123c12a41d88b070")
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:54:59 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',sm'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:54:59 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0xf00, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:54:59 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00x\xbe\x05\x00', 0x1132})

07:54:59 executing program 0:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x40000, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000009c0)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@local}}, &(0x7f00000002c0)=0xe8)
ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f00000003c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r2})
bind$vsock_stream(r0, &(0x7f0000000200), 0x10)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0xfffffffffffffcd1, &(0x7f0000000300)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0x280}}, 0x0)
fstat(r0, &(0x7f0000000340))
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0)
r5 = getuid()
ioctl$SIOCAX25ADDUID(r4, 0x89e1, &(0x7f0000000080)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, r5})
r6 = getpid()
write$binfmt_elf32(r4, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x70, 0x10000, 0xfffffffffffffffe, 0x1, 0x92, 0x3, 0x0, 0xbd, 0x33b, 0x38, 0x2ec, 0x272, 0x1, 0x20, 0x2, 0x3, 0x4, 0xe6}, [{0x0, 0x8, 0xffffffffffffffff, 0x6, 0x9, 0xd34, 0x20, 0xfffffffffffffffb}, {0x3, 0x8, 0xfff, 0x204f, 0x2, 0x3, 0x75df3ba0}], "5b6cbbe73c8fceef340d392dc32a7c642545994404ea9e4eb649dfc5defc04a3f499e1025005414621848fe2ab3ac3296bd87202dfd4a5cb0a73d65cc8778d05e669e21018e0faf5c8dda4edd17c8728f04a30c493e94002b2461f5a49a4eec52d0cdc172f566a8e744c095aa5629bbb8ec5edd0889b", [[], [], [], []]}, 0x4ee)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f00000000c0)={{0x6, 0x7, 0x0, 0x8, '\x00', 0x6}, 0x3, 0x100, 0x10000, r6, 0x1, 0xfffffffffffffff8, 'syz1\x00', &(0x7f0000000040)=[':%wlan0\x00'], 0x8, [], [0x80, 0x3, 0x1f, 0x8]})

07:54:59 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x1100, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2922.652684] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2922.752872] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
07:54:59 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x1200, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:54:59 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x10040, 0x0)
ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f0000000040)=0x1)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)

07:54:59 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x1300, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2923.014682] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
07:54:59 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x17da, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:00 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

07:55:00 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00y\xbe\x05\x00', 0x1132})

07:55:00 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000040)="0adc1f123c12a41d88b070")
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:55:00 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYBLOB=',sma'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:55:00 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000240)={<r1=>0x0, 0x23, 0x10001, 0xff}, &(0x7f0000000280)=0x10)
getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000002c0)={<r2=>r1, 0x7c}, &(0x7f0000000300)=0x8)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x8000, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140)={<r5=>0x0}, &(0x7f0000000180)=0xc)
sched_setscheduler(r5, 0x7, &(0x7f00000001c0)=0xfffffffffffffffa)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000040)=@sack_info={<r6=>0x0, 0x2f042cc6, 0x1ff}, &(0x7f00000000c0)=0xc)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000100)={r6, 0x1, 0x1000, 0x1ff, 0xffffffff, 0x100}, 0x14)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000340)={r2, 0x7e}, 0x8)

07:55:00 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x6000, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2923.475882] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2923.506058] FAT-fs (loop2): Filesystem has been set read-only
07:55:00 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0xda17, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2923.572237] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2923.591778] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
07:55:00 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff)
r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x4, 0x200000)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x1, &(0x7f0000000000), 0x5, r2})

[ 2923.641611] FAT-fs (loop2): error, invalid access to FAT (entry 0x00007400)
[ 2923.679424] FAT-fs (loop2): error, invalid access to FAT (entry 0x00007400)
07:55:00 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00z\xbe\x05\x00', 0x1132})

[ 2923.767672] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2923.837382] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2923.842898] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
07:55:00 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',sm'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:55:00 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0xf000, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2923.897023] FAT-fs (loop5): Filesystem has been set read-only
[ 2923.907152] FAT-fs (loop5): error, invalid access to FAT (entry 0x00007400)
[ 2923.925174] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2924.010254] FAT-fs (loop5): error, invalid access to FAT (entry 0x00007400)
[ 2924.055174] FAT-fs (loop5): error, invalid access to FAT (entry 0x00007400)
07:55:00 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0xf0ffff, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2924.115485] FAT-fs (loop5): error, invalid access to FAT (entry 0x00007400)
[ 2924.148093] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
07:55:01 executing program 0:
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000150001000000000000000000ff010020000000000000000000000001e000000100000000000000000000000000000000000000a66900000000000000", @ANYRES32=0x0, @ANYBLOB="30f79ac51e8e8f91141e80c40e817a4338abdf74b389ac4100634f69840396bfa725279cd3e27183eddc7d403d11afb42adc16f63afdd8126eaf5858116afc9e017c7746d6a4cca7796df5ca50f486e45cdc36", @ANYBLOB="0000000000000000000000000000000000deff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d0000000000000000000000000000000000000000000000000000008100000000000000000000000000000000"], 0x4}}, 0x0)

07:55:01 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000040)="0adc1f123c12a41d88b070")
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

[ 2924.286132] FAT-fs (loop2): Filesystem has been set read-only
07:55:01 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x1000000, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2924.335833] FAT-fs (loop2): error, invalid access to FAT (entry 0x00007400)
[ 2924.384852] FAT-fs (loop2): error, invalid access to FAT (entry 0x00007400)
07:55:01 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYBLOB=',sma'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:55:01 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00{\xbe\x05\x00', 0x1132})

07:55:01 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x2000000, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:01 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', <r2=>0x0})
bind$netlink(r0, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbff, 0x80000000}, 0xc)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)=<r3=>0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20040}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@ipmr_newroute={0x58, 0x18, 0x0, 0x70bd2a, 0x25dfdbfd, {0x80, 0x10, 0x14, 0x7, 0xfd, 0x3, 0xc8, 0x4, 0x200}, [@RTA_ENCAP_TYPE={0x8}, @RTA_MARK={0x8, 0x10, 0xfffffffffffffff8}, @RTA_GATEWAY={0x8, 0x5, @loopback}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MARK={0x8, 0x10, 0xf58}, @RTA_ENCAP={0xc, 0x16, @typed={0x8, 0x88, @pid=r3}}, @RTA_GATEWAY={0x8, 0x5, @local}]}, 0x58}, 0x1, 0x0, 0x0, 0x805}, 0x81)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)

07:55:01 executing program 2 (fault-call:19 fault-nth:0):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

[ 2924.584841] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2924.600443] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2924.611126] FAT-fs (loop5): Filesystem has been set read-only
[ 2924.623185] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2924.628226] FAT-fs (loop5): error, invalid access to FAT (entry 0x00007400)
07:55:01 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x3000000, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:01 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x3, 0x0)
write$cgroup_type(r1, &(0x7f0000000100)='threaded\x00', 0x9)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000400)={0x6, r1, 0x1})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f00000004c0)="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", &(0x7f0000000040)="79166fae3a7c17", 0x1}, 0x20)
ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000140))
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="b8000000150001000000000000000000ff010800000000000000000000000001e008000100000000000000000000000000000000000000000a00000000000000c6357117de6a1b4d693c37893d31f32b72b3f8650761c120058df87934ab6858a0a4c8b5636c5f7200eb7a3fd19903ec4e167a8762ea040316c38486e5eb8fb51b1fb3f92e15a5f10792a5393c9385864a15932ae7fa0f126321adc4b9d30defc94ee7708c46315f889a571206c08f0183ceabed241c34a2b3cbc1d6a97959a4a73d0d2795fe823e240e027a9a952b392fcffa5b72250f9ca4749897ec1fb1c33f429e03ab4b7fe41f535fef6c1dc1ee90a4ff736c59cce8522849f6e561137ba3106b897f42419527d851410b02f91c77c9594de189481b60bd9cd475cd49c6643725b32f396186479decb8a44244d583fc29b822b0830c3c6648f05bb2109fbd85d755e3eba5e2d4033568f203e6366d26a2e599529a1e570fb78ecc3d3fed4d144521e8a6c1bebb3520959d05f8c40902fb778a592a02e48d3794bcbd6441a44ee01b138910b73a5a2860a8537db0d93e62bd805e9a347e682d7cd273e891b084ee9c11e170535ed24e4da84a13a404fdfdbec1f0160603156335c0eda6dd568b7d501be9144a4be8bba88c03406ae8fa555c2acadaf26c46885615b209840d2201df9bd5224fa83b8f43689477f6333c0b6eb3e0e15cab27dcab6b77c8346a78c29f81d0efbcb09b951d8ac25bfbec96ae152c6690e9e69f2be2ea38fb9c23fbbf2d76a825840abda2278fc2210c72db79b036f3a11205e16e387a07b7fc699e5c3cb64df8b1ab3a2763b229d90bd735af590c32a7acb681b7534a3660f24defc4985a54d4c530a93e46c37ea064272cf79cd9e52a13", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xb8}}, 0x0)

[ 2924.656975] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2924.693437] FAT-fs (loop5): error, invalid access to FAT (entry 0x00007400)
[ 2924.762271] FAT-fs (loop5): error, invalid access to FAT (entry 0x00007400)
07:55:01 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x4000000, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2924.859005] FAT-fs (loop5): error, invalid access to FAT (entry 0x00007400)
[ 2924.872097] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2924.937293] FAULT_INJECTION: forcing a failure.
[ 2924.937293] name failslab, interval 1, probability 0, space 0, times 0
[ 2925.013914] CPU: 0 PID: 28996 Comm: syz-executor.2 Not tainted 5.0.0-rc8+ #88
[ 2925.021248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2925.030618] Call Trace:
[ 2925.033230]  dump_stack+0x172/0x1f0
[ 2925.036895]  should_fail.cold+0xa/0x1b
[ 2925.040806]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 2925.045933]  ? lock_downgrade+0x810/0x810
[ 2925.050103]  ? ___might_sleep+0x163/0x280
[ 2925.054273]  __should_failslab+0x121/0x190
[ 2925.058523]  should_failslab+0x9/0x14
[ 2925.062344]  kmem_cache_alloc_trace+0x2d1/0x760
[ 2925.067039]  alloc_pipe_info+0xb9/0x430
[ 2925.071027]  ? __fget+0x340/0x540
[ 2925.074504]  splice_direct_to_actor+0x775/0x970
[ 2925.079193]  ? mark_held_locks+0x100/0x100
[ 2925.083456]  ? generic_pipe_buf_nosteal+0x10/0x10
[ 2925.088330]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2925.094243]  ? do_splice_to+0x190/0x190
[ 2925.098252]  ? rw_verify_area+0x118/0x360
[ 2925.102434]  do_splice_direct+0x1da/0x2a0
[ 2925.106605]  ? splice_direct_to_actor+0x970/0x970
[ 2925.111476]  ? rcu_read_lock_sched_held+0x110/0x130
[ 2925.116521]  ? rcu_sync_lockdep_assert+0x73/0xb0
[ 2925.121299]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2925.126871]  ? __sb_start_write+0x1ac/0x360
[ 2925.131224]  do_sendfile+0x597/0xd00
[ 2925.134968]  ? do_compat_pwritev64+0x1c0/0x1c0
[ 2925.139575]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 2925.145131]  ? _copy_from_user+0xdd/0x150
[ 2925.149303]  __x64_sys_sendfile64+0x15a/0x220
[ 2925.153831]  ? __ia32_sys_sendfile+0x230/0x230
[ 2925.158438]  ? do_syscall_64+0x26/0x610
[ 2925.162428]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 2925.167033]  ? trace_hardirqs_on+0x67/0x230
[ 2925.171381]  do_syscall_64+0x103/0x610
[ 2925.175294]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2925.180501] RIP: 0033:0x457e29
[ 2925.183708] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2925.202622] RSP: 002b:00007f15281b4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
07:55:02 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000150004000000000000000000ff010000000000000000000000000001e0000000000000000000000000000a0000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xb8}}, 0x0)

07:55:02 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x5000000, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:02 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

[ 2925.210346] RAX: ffffffffffffffda RBX: 00007f15281b4c90 RCX: 0000000000457e29
[ 2925.217633] RDX: 0000000020000000 RSI: 0000000000000008 RDI: 0000000000000008
[ 2925.224921] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000
[ 2925.232206] R10: 00008080fffffffe R11: 0000000000000246 R12: 00007f15281b56d4
[ 2925.239496] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 0000000000000005
07:55:02 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x6000000, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:02 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYBLOB=',sma'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:55:02 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=<r1=>0x0)
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)=r1)

07:55:02 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x8000000, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:02 executing program 2 (fault-call:19 fault-nth:1):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

07:55:02 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00|\xbe\x05\x00', 0x1132})

07:55:02 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x9000000, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:02 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x9, 0x0)
ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f00000000c0)={0x6})

[ 2925.829097] FAULT_INJECTION: forcing a failure.
[ 2925.829097] name failslab, interval 1, probability 0, space 0, times 0
[ 2925.904104] CPU: 1 PID: 29033 Comm: syz-executor.2 Not tainted 5.0.0-rc8+ #88
[ 2925.911435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2925.920805] Call Trace:
[ 2925.923430]  dump_stack+0x172/0x1f0
[ 2925.927084]  should_fail.cold+0xa/0x1b
[ 2925.931006]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 2925.936135]  ? lock_downgrade+0x810/0x810
[ 2925.940303]  ? ___might_sleep+0x163/0x280
[ 2925.944475]  __should_failslab+0x121/0x190
[ 2925.948733]  should_failslab+0x9/0x14
[ 2925.952551]  __kmalloc+0x2dc/0x740
[ 2925.956114]  ? kmem_cache_alloc_trace+0x354/0x760
[ 2925.960979]  ? alloc_pipe_info+0x199/0x430
[ 2925.965234]  alloc_pipe_info+0x199/0x430
[ 2925.969314]  ? generic_pipe_buf_nosteal+0x10/0x10
[ 2925.974190]  splice_direct_to_actor+0x775/0x970
[ 2925.978885]  ? mark_held_locks+0x100/0x100
[ 2925.983149]  ? generic_pipe_buf_nosteal+0x10/0x10
[ 2925.988022]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2925.993728]  ? do_splice_to+0x190/0x190
[ 2925.997729]  ? rw_verify_area+0x118/0x360
[ 2926.001902]  do_splice_direct+0x1da/0x2a0
[ 2926.006077]  ? splice_direct_to_actor+0x970/0x970
[ 2926.010944]  ? rcu_read_lock_sched_held+0x110/0x130
[ 2926.015980]  ? rcu_sync_lockdep_assert+0x73/0xb0
[ 2926.020756]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2926.026317]  ? __sb_start_write+0x1ac/0x360
[ 2926.027757] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2926.030664]  do_sendfile+0x597/0xd00
[ 2926.030704]  ? do_compat_pwritev64+0x1c0/0x1c0
[ 2926.030725]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 2926.030745]  ? _copy_from_user+0xdd/0x150
[ 2926.056536]  __x64_sys_sendfile64+0x15a/0x220
[ 2926.061054]  ? __ia32_sys_sendfile+0x230/0x230
[ 2926.062088] FAT-fs (loop2): Filesystem has been set read-only
[ 2926.065650]  ? do_syscall_64+0x26/0x610
[ 2926.065669]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 2926.065685]  ? trace_hardirqs_on+0x67/0x230
[ 2926.065706]  do_syscall_64+0x103/0x610
[ 2926.088384]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2926.093594] RIP: 0033:0x457e29
[ 2926.096799] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2926.115734] RSP: 002b:00007f15281b4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2926.123461] RAX: ffffffffffffffda RBX: 00007f15281b4c90 RCX: 0000000000457e29
[ 2926.130746] RDX: 0000000020000000 RSI: 0000000000000006 RDI: 0000000000000006
[ 2926.138033] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000
[ 2926.145326] R10: 00008080fffffffe R11: 0000000000000246 R12: 00007f15281b56d4
07:55:03 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0xa000000, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:03 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
r1 = accept4(r0, &(0x7f0000000100)=@generic, &(0x7f0000000180)=0x80, 0x800)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000200)='SEG6\x00')
sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x202000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r2, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x7, 0x2, 0x6, 0x430, 0x20]}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x59, 0x0, 0x7406, 0xfffffffffffffffd]}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xfa5]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20048814}, 0x1)

[ 2926.152622] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 0000000000000008
07:55:03 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0xb000000, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2926.209266] FAT-fs (loop5): error, invalid access to FAT (entry 0x00007400)
[ 2926.239601] FAT-fs (loop5): Filesystem has been set read-only
[ 2926.261488] FAT-fs (loop2): error, invalid access to FAT (entry 0x00007400)
07:55:03 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:55:03 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00}\xbe\x05\x00', 0x1132})

07:55:03 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYBLOB])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:55:03 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffff7, &(0x7f00000bfff0)={&(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r0], 0xb8}}, 0x0)

07:55:03 executing program 2 (fault-call:19 fault-nth:2):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

07:55:03 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0xe000000, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:03 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={r0, 0x0, 0x1ff, 0x1ff})
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffe55, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x4010)
r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x5, 0x0)
getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f00000000c0)=0x10000, &(0x7f0000000100)=0x1)

07:55:03 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0xf000000, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2926.836961] FAULT_INJECTION: forcing a failure.
[ 2926.836961] name failslab, interval 1, probability 0, space 0, times 0
07:55:03 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00~\xbe\x05\x00', 0x1132})

[ 2926.896563] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2926.921834] CPU: 1 PID: 29076 Comm: syz-executor.2 Not tainted 5.0.0-rc8+ #88
[ 2926.929161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2926.938647] Call Trace:
[ 2926.941259]  dump_stack+0x172/0x1f0
[ 2926.944911]  should_fail.cold+0xa/0x1b
[ 2926.945208] FAT-fs (loop1): Filesystem has been set read-only
[ 2926.948832]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 2926.959950]  ? lock_downgrade+0x810/0x810
[ 2926.964126]  ? ___might_sleep+0x163/0x280
[ 2926.968395]  __should_failslab+0x121/0x190
[ 2926.972652]  should_failslab+0x9/0x14
[ 2926.976468]  __kmalloc+0x2dc/0x740
[ 2926.980030]  ? iter_file_splice_write+0x16e/0xbe0
[ 2926.984894]  iter_file_splice_write+0x16e/0xbe0
[ 2926.984915] FAT-fs (loop1): error, invalid access to FAT (entry 0x00007400)
[ 2926.989575]  ? atime_needs_update+0x5f0/0x5f0
[ 2926.989602]  ? generic_file_splice_read+0x53a/0x800
[ 2926.989618]  ? page_cache_pipe_buf_confirm+0x2b0/0x2b0
[ 2926.989636]  ? add_to_pipe+0x350/0x350
[ 2926.989671]  ? rw_verify_area+0x118/0x360
[ 2926.997849] FAT-fs (loop1): error, invalid access to FAT (entry 0x00007400)
[ 2927.001272]  ? page_cache_pipe_buf_confirm+0x2b0/0x2b0
[ 2927.001292]  direct_splice_actor+0x126/0x1a0
[ 2927.001315]  splice_direct_to_actor+0x369/0x970
[ 2927.001336]  ? generic_pipe_buf_nosteal+0x10/0x10
[ 2927.001365]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2927.001383]  ? do_splice_to+0x190/0x190
[ 2927.055537]  ? rw_verify_area+0x118/0x360
[ 2927.059714]  do_splice_direct+0x1da/0x2a0
[ 2927.063887]  ? splice_direct_to_actor+0x970/0x970
[ 2927.068757]  ? rcu_read_lock_sched_held+0x110/0x130
[ 2927.073796]  ? rcu_sync_lockdep_assert+0x73/0xb0
[ 2927.078577]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2927.084131]  ? __sb_start_write+0x1ac/0x360
[ 2927.088475]  do_sendfile+0x597/0xd00
[ 2927.092216]  ? do_compat_pwritev64+0x1c0/0x1c0
[ 2927.096832]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 2927.102389]  ? _copy_from_user+0xdd/0x150
[ 2927.106560]  __x64_sys_sendfile64+0x15a/0x220
[ 2927.111074]  ? __ia32_sys_sendfile+0x230/0x230
[ 2927.115678]  ? __ia32_sys_sendfile+0x230/0x230
[ 2927.120287]  do_syscall_64+0x103/0x610
[ 2927.124196]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2927.129396] RIP: 0033:0x457e29
07:55:03 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYBLOB])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:55:04 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x10000000, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:04 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000150001000000000000000000ff010000000000000000000000000001e0000001000000000000c8690000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xb8}}, 0x0)

[ 2927.132600] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2927.151515] RSP: 002b:00007f15281d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2927.159245] RAX: ffffffffffffffda RBX: 00007f15281d5c90 RCX: 0000000000457e29
[ 2927.166531] RDX: 0000000020000000 RSI: 0000000000000008 RDI: 0000000000000008
[ 2927.173906] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 2927.181194] R10: 00008080fffffffe R11: 0000000000000246 R12: 00007f15281d66d4
[ 2927.188477] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 000000000000000a
[ 2927.299066] FAT-fs (loop5): error, invalid access to FAT (entry 0x00007400)
[ 2927.328146] FAT-fs (loop5): Filesystem has been set read-only
07:55:04 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:55:04 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0xfffffe83, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[]}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

07:55:04 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x11000000, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:04 executing program 2 (fault-call:19 fault-nth:3):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

07:55:04 executing program 0:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x200, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20010}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xe0, r1, 0x500, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0xac, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800000010000}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb9}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x50}, 0x40)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)

07:55:04 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x12000000, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:04 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x7f\xbe\x05\x00', 0x1132})

[ 2927.675632] __nla_parse: 10 callbacks suppressed
[ 2927.675642] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
07:55:04 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x13000000, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2927.791097] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2927.796286] FAULT_INJECTION: forcing a failure.
[ 2927.796286] name failslab, interval 1, probability 0, space 0, times 0
[ 2927.929556] CPU: 1 PID: 29130 Comm: syz-executor.2 Not tainted 5.0.0-rc8+ #88
[ 2927.936887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2927.946252] Call Trace:
[ 2927.946277]  dump_stack+0x172/0x1f0
[ 2927.946298]  should_fail.cold+0xa/0x1b
[ 2927.946317]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 2927.946336]  ? lock_downgrade+0x810/0x810
[ 2927.961555]  ? ___might_sleep+0x163/0x280
[ 2927.961577]  __should_failslab+0x121/0x190
[ 2927.961595]  should_failslab+0x9/0x14
[ 2927.961609]  __kmalloc+0x2dc/0x740
[ 2927.961627]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[ 2927.961640]  ? atime_needs_update+0x491/0x5f0
[ 2927.961654]  ? iter_file_splice_write+0x16e/0xbe0
[ 2927.961671]  iter_file_splice_write+0x16e/0xbe0
[ 2927.961687]  ? atime_needs_update+0x5f0/0x5f0
[ 2927.981551]  ? generic_file_splice_read+0x53a/0x800
[ 2927.981570]  ? page_cache_pipe_buf_confirm+0x2b0/0x2b0
[ 2927.995912]  ? add_to_pipe+0x350/0x350
[ 2927.995946]  ? rw_verify_area+0x118/0x360
[ 2927.995973]  ? page_cache_pipe_buf_confirm+0x2b0/0x2b0
07:55:04 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
recvfrom(r0, &(0x7f0000000280)=""/120, 0x78, 0x41, 0x0, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000150001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000020000000000000000000000"], 0xb8}}, 0x0)
r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x2, 0x400000)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={<r2=>0x0, 0x2}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000100)={r2, @in6={{0xa, 0x4e23, 0x6f3e, @loopback, 0x7}}, [0xbf, 0x6, 0x100000000, 0x1000, 0x2847, 0x9f, 0x3ff, 0x2, 0x4d9, 0x40, 0x9, 0x1000000000000, 0x3f, 0x4, 0x1db]}, &(0x7f0000000200)=0x100)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-vsock\x00', 0x2, 0x0)

[ 2928.010154]  direct_splice_actor+0x126/0x1a0
[ 2928.010176]  splice_direct_to_actor+0x369/0x970
[ 2928.010197]  ? generic_pipe_buf_nosteal+0x10/0x10
[ 2928.010221]  ? do_splice_to+0x190/0x190
[ 2928.010241]  ? rw_verify_area+0x118/0x360
[ 2928.010262]  do_splice_direct+0x1da/0x2a0
[ 2928.010285]  ? splice_direct_to_actor+0x970/0x970
[ 2928.028875]  ? rcu_read_lock_sched_held+0x110/0x130
[ 2928.028892]  ? rcu_sync_lockdep_assert+0x73/0xb0
[ 2928.028908]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2928.028925]  ? __sb_start_write+0x1ac/0x360
[ 2928.028946]  do_sendfile+0x597/0xd00
[ 2928.028973]  ? do_compat_pwritev64+0x1c0/0x1c0
[ 2928.028994]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 2928.029013]  ? _copy_from_user+0xdd/0x150
[ 2928.042933]  __x64_sys_sendfile64+0x15a/0x220
[ 2928.042953]  ? __ia32_sys_sendfile+0x230/0x230
[ 2928.042971]  ? do_syscall_64+0x26/0x610
[ 2928.042988]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 2928.043005]  ? trace_hardirqs_on+0x67/0x230
[ 2928.043023]  do_syscall_64+0x103/0x610
[ 2928.055284]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2928.055297] RIP: 0033:0x457e29
[ 2928.055314] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2928.055323] RSP: 002b:00007f15281d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2928.055337] RAX: ffffffffffffffda RBX: 00007f15281d5c90 RCX: 0000000000457e29
[ 2928.055355] RDX: 0000000020000000 RSI: 0000000000000008 RDI: 0000000000000008
07:55:05 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYBLOB])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:55:05 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x60000000, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2928.069957] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 2928.069967] R10: 00008080fffffffe R11: 0000000000000246 R12: 00007f15281d66d4
[ 2928.069975] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 0000000000000005
[ 2928.108515] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2928.119958] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
07:55:05 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x80ffffff, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:05 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040))
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:55:05 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@mcast2}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000800)=@newpolicy={0x214, 0x13, 0x300, 0x70bd2a, 0x25dfdbfc, {{@in=@empty, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4e20, 0x3, 0x4e21, 0xffffffff80000000, 0xaa7d3fd67ce4c228, 0x20, 0x20, 0x84, 0x0, r1}, {0x3f0, 0x1, 0x5, 0x7, 0x869, 0x400, 0x0, 0x1ff}, {0x6, 0x48e, 0x8, 0x1d}, 0xff, 0x6e6bba, 0x0, 0x0, 0x0, 0x3}, [@algo_aead={0x104, 0x12, {{'morus1280-generic\x00'}, 0x5a8, 0x80, "d2d4bad0fdc7e27460fb57ee718708318fac16af652c74f2688042676ace17f1b02365a694c4eb683fed8a52347f54a3db4fff493cce5cf00a91d5252072c9ca6cb6f25d39f87a5486d75882440a259acffd927ca150986b8c468740bfce52e4eeff6dd09254b2eba322f59f093637fabe6e45905386c5f477f00f298cff0bd61cfea06c2ea34f514ccd8f3020b73b12b5e39be5e5cf97e162838a758e27dee52c443d2a7c6c203099372632e81af91d43387785a4"}}, @tmpl={0x44, 0x5, [{{@in6=@empty, 0x4d2, 0x3b}, 0x2, @in=@multicast1, 0x3504, 0x2, 0x2, 0x5, 0x10000, 0x7f, 0x4}]}, @replay_thresh={0x8, 0xb, 0x80000001}, @offload={0xc, 0x1c, {r2, 0x2}}]}, 0x214}, 0x1, 0x0, 0x0, 0x4}, 0x4)
r3 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xffffffff, 0x202000)
sendto$netrom(r3, &(0x7f00000000c0)="09fc79cc944a26d4caec95c587c9490eeb9008ad93cd4f3302c7a46b80db8c50f4b39deea4c4d2c64306709beaa7ebdbcf70b538c9606c687950c7dba40996b95d162adf260d85f1f123e6d4a9ae1495392929f2727870b9a83e26369311bc53f63a071c8e63285e29679de8d5ff018b830110c95692e25fb747f3f04a37997ab4308454", 0x84, 0x20000000, &(0x7f0000000180)={{0x3, @bcast, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48)

07:55:05 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x9effffff, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:05 executing program 2 (fault-call:19 fault-nth:4):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

07:55:05 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x80\xbe\x05\x00', 0x1132})

07:55:05 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)

07:55:05 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0xda170000, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2928.791193] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2928.823799] FAULT_INJECTION: forcing a failure.
[ 2928.823799] name failslab, interval 1, probability 0, space 0, times 0
07:55:05 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0xf0ffffff, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2928.876753] CPU: 0 PID: 29174 Comm: syz-executor.2 Not tainted 5.0.0-rc8+ #88
[ 2928.884084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2928.893448] Call Trace:
[ 2928.896054]  dump_stack+0x172/0x1f0
[ 2928.899697]  should_fail.cold+0xa/0x1b
[ 2928.899719]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 2928.899738]  ? lock_downgrade+0x810/0x810
[ 2928.899759]  ? ___might_sleep+0x163/0x280
[ 2928.899785]  __should_failslab+0x121/0x190
[ 2928.908785]  should_failslab+0x9/0x14
[ 2928.908802]  __kmalloc+0x2dc/0x740
[ 2928.908819]  ? __sanitizer_cov_trace_const_cmp4+0x1/0x20
[ 2928.908835]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 2928.908856]  ? atime_needs_update+0x491/0x5f0
[ 2928.908873]  ? iter_file_splice_write+0x16e/0xbe0
[ 2928.949017]  iter_file_splice_write+0x16e/0xbe0
[ 2928.953709]  ? atime_needs_update+0x5f0/0x5f0
[ 2928.958233]  ? generic_file_splice_read+0x53a/0x800
[ 2928.963271]  ? page_cache_pipe_buf_confirm+0x2b0/0x2b0
[ 2928.968564]  ? add_to_pipe+0x350/0x350
[ 2928.972489]  ? rw_verify_area+0x118/0x360
[ 2928.976648]  ? page_cache_pipe_buf_confirm+0x2b0/0x2b0
[ 2928.981954]  direct_splice_actor+0x126/0x1a0
[ 2928.986389]  splice_direct_to_actor+0x369/0x970
[ 2928.991093]  ? generic_pipe_buf_nosteal+0x10/0x10
[ 2928.995966]  ? do_splice_to+0x190/0x190
[ 2928.999967]  ? rw_verify_area+0x118/0x360
[ 2929.004141]  do_splice_direct+0x1da/0x2a0
[ 2929.008310]  ? splice_direct_to_actor+0x970/0x970
[ 2929.013183]  ? rcu_read_lock_sched_held+0x110/0x130
[ 2929.018222]  ? rcu_sync_lockdep_assert+0x73/0xb0
07:55:05 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0xfcffffff, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2929.022993]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2929.028552]  ? __sb_start_write+0x1ac/0x360
[ 2929.032901]  do_sendfile+0x597/0xd00
[ 2929.036637]  ? do_compat_pwritev64+0x1c0/0x1c0
[ 2929.041238]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 2929.046794]  ? _copy_from_user+0xdd/0x150
[ 2929.050964]  __x64_sys_sendfile64+0x15a/0x220
[ 2929.050981]  ? __ia32_sys_sendfile+0x230/0x230
[ 2929.050995]  ? do_syscall_64+0x26/0x610
[ 2929.051011]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 2929.051027]  ? trace_hardirqs_on+0x67/0x230
[ 2929.051046]  do_syscall_64+0x103/0x610
[ 2929.051066]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2929.051078] RIP: 0033:0x457e29
[ 2929.051093] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2929.051105] RSP: 002b:00007f15281d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2929.060197] RAX: ffffffffffffffda RBX: 00007f15281d5c90 RCX: 0000000000457e29
[ 2929.119180] RDX: 0000000020000000 RSI: 0000000000000008 RDI: 0000000000000008
[ 2929.126466] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 2929.133751] R10: 00008080fffffffe R11: 0000000000000246 R12: 00007f15281d66d4
[ 2929.141034] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 0000000000000006
07:55:06 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@broadcast, @initdev, <r1=>0x0}, &(0x7f0000000040)=0xc)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x2da, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a4010000100020002abd7000ffdbdf25fe880000000000000000000000000001000000000000000000000000000000014e2400804e2400000a0080a0bf000000", @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="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"], 0x1a4}, 0x1, 0x0, 0x0, 0x4c040}, 0x0)

07:55:06 executing program 2 (fault-call:19 fault-nth:5):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

07:55:06 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0xfffff000, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2929.447980] FAULT_INJECTION: forcing a failure.
[ 2929.447980] name failslab, interval 1, probability 0, space 0, times 0
[ 2929.507407] CPU: 0 PID: 29208 Comm: syz-executor.2 Not tainted 5.0.0-rc8+ #88
[ 2929.514741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2929.524102] Call Trace:
[ 2929.526690]  dump_stack+0x172/0x1f0
[ 2929.530313]  should_fail.cold+0xa/0x1b
[ 2929.534193]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 2929.539287]  ? lock_downgrade+0x810/0x810
[ 2929.543429]  ? ___might_sleep+0x163/0x280
[ 2929.547596]  __should_failslab+0x121/0x190
[ 2929.551825]  should_failslab+0x9/0x14
[ 2929.555643]  __kmalloc+0x2dc/0x740
[ 2929.559192]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[ 2929.564202]  ? atime_needs_update+0x491/0x5f0
[ 2929.568689]  ? iter_file_splice_write+0x16e/0xbe0
[ 2929.573585]  iter_file_splice_write+0x16e/0xbe0
[ 2929.578309]  ? atime_needs_update+0x5f0/0x5f0
[ 2929.582827]  ? generic_file_splice_read+0x53a/0x800
[ 2929.587855]  ? page_cache_pipe_buf_confirm+0x2b0/0x2b0
[ 2929.593133]  ? add_to_pipe+0x350/0x350
[ 2929.597023]  ? rw_verify_area+0x118/0x360
[ 2929.601165]  ? page_cache_pipe_buf_confirm+0x2b0/0x2b0
[ 2929.606708]  direct_splice_actor+0x126/0x1a0
[ 2929.611114]  splice_direct_to_actor+0x369/0x970
[ 2929.615781]  ? generic_pipe_buf_nosteal+0x10/0x10
[ 2929.626581]  ? do_splice_to+0x190/0x190
[ 2929.630563]  ? rw_verify_area+0x118/0x360
[ 2929.634709]  do_splice_direct+0x1da/0x2a0
[ 2929.638859]  ? splice_direct_to_actor+0x970/0x970
[ 2929.643700]  ? rcu_read_lock_sched_held+0x110/0x130
[ 2929.648715]  ? rcu_sync_lockdep_assert+0x73/0xb0
[ 2929.653473]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2929.659035]  ? __sb_start_write+0x1ac/0x360
[ 2929.663358]  do_sendfile+0x597/0xd00
[ 2929.667077]  ? do_compat_pwritev64+0x1c0/0x1c0
[ 2929.671656]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 2929.677188]  ? _copy_from_user+0xdd/0x150
[ 2929.681330]  __x64_sys_sendfile64+0x15a/0x220
[ 2929.685824]  ? __ia32_sys_sendfile+0x230/0x230
[ 2929.690401]  ? do_syscall_64+0x26/0x610
[ 2929.694376]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 2929.698964]  ? trace_hardirqs_on+0x67/0x230
[ 2929.703289]  do_syscall_64+0x103/0x610
[ 2929.707174]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2929.712360] RIP: 0033:0x457e29
[ 2929.715552] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2929.734463] RSP: 002b:00007f15281d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2929.742167] RAX: ffffffffffffffda RBX: 00007f15281d5c90 RCX: 0000000000457e29
[ 2929.749500] RDX: 0000000020000000 RSI: 0000000000000008 RDI: 0000000000000008
07:55:06 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000150001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000063d7fb3500000000000000000000"], 0xb8}}, 0x0)

07:55:06 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYBLOB=',s'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:55:06 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0xffffff7f, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:06 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040))
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:55:06 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x81\xbe\x05\x00', 0x1132})

[ 2929.756764] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 2929.764050] R10: 00008080fffffffe R11: 0000000000000246 R12: 00007f15281d66d4
[ 2929.771339] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 0000000000000005
07:55:06 executing program 2 (fault-call:19 fault-nth:6):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

[ 2929.826885] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
07:55:06 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0xffffff80, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2929.907789] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
07:55:06 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b80000001d0001000000000000000000ff0100c100000000807b000000000001e000000100000000000000000000000000000000000000000a000000000000004c39f3601b66c44931b741e84e84000083113fb7900ccf6481244fce9277d05758493413478c94fcdfbe38b154b3845345f0ce8ea480fcc89d8ef241bd462228584488ad4dea92f699fa8b55c76fa09614d745f273ad7d1d6673a379d8cdb65771f83c2c6a57b0f0e70bb6d71489", @ANYRESOCT=r0, @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRES16=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRES16=r0, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYRESHEX=r0, @ANYRES64=r0, @ANYRES64=r0, @ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB="57f5eb4f58a455cc140eb0ec9768174404c89ae859c727de555df21268bf21cbe9784610589646285ccf675d6d5c6bfac87a0fa22287c9124d318c8f7c5be11e91ad788fe9e4faa2d64825da5345f7bf5a3df2a7256d312ac715c8e1f99ff0278cc1ad06f4cb517468cd0a26e7dc458415b3c23d43cf3191800233a231bfa1dc0cfb96cb12fc4f23a533bba1c483001764e3dd90b8bce841056aa518c9a7a6cfa8c735fa99cd222e98138047d9a121c64eac44f5adc9d17e5bbd4c8837ab0507"]], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x4}}, 0x0)

07:55:07 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0xffffff9e, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:07 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000150001000000000000000000ff010000000000000000000000000001e000000100000a000000000000357de26d10e189fa617f2600000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xb8}, 0x1, 0x0, 0x0, 0x2}, 0x20004000)

[ 2930.239587] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2930.258782] FAT-fs (loop2): Filesystem has been set read-only
07:55:07 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0xfffffff0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:07 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x82\xbe\x05\x00', 0x1132})

[ 2930.379396] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
07:55:07 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0xfffffffc, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2930.558290] FAT-fs (loop2): error, invalid access to FAT (entry 0x00007400)
[ 2930.605822] FAT-fs (loop2): error, invalid access to FAT (entry 0x00007400)
07:55:07 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYBLOB=',s'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:55:07 executing program 0:
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000150001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lq\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xb8}}, 0x0)
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x200, 0x0)
ioctl$BLKTRACESTART(r0, 0x1274, 0x0)

07:55:07 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040))
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:55:07 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

07:55:07 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x1000000000000, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:07 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
r1 = accept4$packet(0xffffffffffffff9c, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14, 0x80000)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000019c0)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@ipv4={[], [], @initdev}}, 0x0, @in=@remote}}, &(0x7f0000001ac0)=0xe8)
bind$packet(r1, &(0x7f0000001b00)={0x11, 0x1c, r2, 0x1, 0x7ff, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14)

07:55:07 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x83\xbe\x05\x00', 0x1132})

[ 2930.899324] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
07:55:07 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0xf0ffffffffffff, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2930.950451] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
07:55:08 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000150001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000d200000000000000000001000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffe900000000000000000000001e000000000000000000000000000000000000000000000000"], 0xb8}}, 0x0)

07:55:08 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x100000000000000, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:08 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
prctl$PR_SET_TIMERSLACK(0x1d, 0x80000000)
r1 = socket(0x10, 0xa, 0x7)
getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="6d616e676c650000000000000100000000000000000000000000000000000000ac00f4ffe4a121237ad4c912dce9f0e8c01e220d0c510b03448092cf7480e94b5a44c7061cd8e3aa08bc421825c4f952fdb1239c753c3e1aea98051898f0c5853919861d98884048e7ce99816ccd5f5168c94564cb80344c5c1c33aa7c6c4855e89893548aebba7e74af6372940d534d1ca910809e2b8fe669903f15e61effdb075a3921038b9127a290654fc5149d086b05756bb97e2ee48173e71cff48276ec14ef1f683f51b811b261bd415c098e9"], &(0x7f0000000000)=0xd0)

07:55:08 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x20000, 0x0)
ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000040)=0xff5)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000280)=<r2=>0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@ipv4={[], [], @local}, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f00000003c0)=0xe8)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001680)={0x0, 0x0, <r4=>0x0}, &(0x7f00000016c0)=0xc)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000001700)=<r5=>0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001740)={0x0, <r6=>0x0}, &(0x7f0000001780)=0xc)
getresgid(&(0x7f00000017c0), &(0x7f0000001800)=<r7=>0x0, &(0x7f0000001840))
r8 = getpid()
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001880)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f0000001980)=0xe8)
stat(&(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0})
sendmsg$netlink(r0, &(0x7f0000001b00)={&(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbff, 0x10040}, 0xc, &(0x7f0000000240)=[{&(0x7f0000000100)={0xd4, 0x27, 0x430, 0x70bd2a, 0x25dfdbfe, "", [@typed={0xc, 0x86, @u64=0x8}, @typed={0x8, 0x73, @fd=r1}, @generic="8bf61dbef673cc6b3d887b2498c8832a32e9af6a484ff1f03d7867c4b9e7bbf580fff3a3e17a5a5ffe4236b394c84da5d3350ddb1bf772e0aaa3dba06f32dc61f979ea6bb09c2f5597b7a7880395b073bc0503f629b24dc2c22d9cad7af507dbcdf2cb93c6fa5c523ed707069ee495628f876a123ff89f46b06af4345fa9b9c696dc647e7c2e4d83f0a4e348903da6cdb2c8760da6c319ac63f94174dab0a22fbec9a30880a9bef2c9ae5b7701"]}, 0xd4}, {&(0x7f00000004c0)={0x11c0, 0x36, 0x400, 0x70bd2c, 0x25dfdbfe, "", [@nested={0x11b0, 0x88, [@generic="4d1918328959d498f9b72016fbb44af1a8d15a530e4bd63583019215580b0b301bbde216b412f9b9f817ac9a1266ae8d6212cbff89a7415b6bb00a862821813c30b949af6b033687e1d83239244700", @generic="1b46e8c83907acfb8fac5b5f6a5e103496fabccea130a6e32d5f1f533f13033f2faf1555f2c6e9bd32e128de491869e57587590e6efc9e1d0640f1121e2062120624f5608ce2b7f1df485958222db9b9aa2327700c10ca8b62253db276286e4ed2b94976677458810f1578be85150eee50dd3366a29c8c2da9ec78df60732db1622cabc41513079428a68b2a0ae7cb13cd1319e9a2d5a84fdd6eba61b7ea6ec4dcfe3aea56e1b5564290eecb3b836931d28cd0fe8e4c459c9123fb2af3ed9983cb27c03ad5101706557235fc6700e9352fd2ca9750f8da0706077aee7f1bac178d26720e62f3de03149b6b80c73c5f72fd5d97a5a5a1e20e22c68380c967dfc30b8e5b57174d88ede29cd946b7f0b0900247fa1140ea8ebe0e1924bc06a657db8f642d6faae0f897edd6cb938f8de5b1cb26cdd44c659255fbbb5d4c76129c93175f37c357beed8f5b7fa7b5cc05dc579206189942073d16ef227e0cedea7b5f8de031038c0483ab360601dd22a804cf474ca3b42603a4ad18c6bc01c11bc581ab55e0299054e94eefd7892559567b097f54f73f8a10705ad2ffad92c8ef7d2da2557d2c289b74ee004762efc061a3345ab962b967852e3947e773375c782937e39a02dea45165f1ff8a657004a490c94195cbc8ba7fce0acf03cdacfdf76e87346f45736313e6cb5a2fdd7e044b01868b94d2973fd0a9f9d29a8a504fbae90bf929960c594eec27f200868dcf1681f7f595e730f01004a803de5024375fc10be41092d146c3eb21d3672430ed226339f144762728a2f8a432ff3c7921f29fb0b055ce0e30b8169ddb23dcde89a7cce64383636e4b38971fc980c7a8fcf2b9f79e7acf51a0ee02ccc24b81e96bfd1f115949afd23333e7b00a555940f126e8347f5da2957b0fc0d68f41a5061a2a013b0904644f262f72f08ee0e9a746bb68822e74b58421420250a22c58d0c081a92851cac6893df226d7143dfad8182eb076eea32fc92dbf063e4ec0a5f94c6a677a151701a47a307e0fde776ac6e43256f2f5ec59e1dcc213f7b05b2dd894c80a3c9a4e58e8480b63c33a149095697210de84c67f2878f427ec89c165c6d4b9ebbb97ca2824599eeb7e4bee2a7a7b689a4d1eb5cfbc410716591a39dab8242194f0ddaea8e2c920cbf1294e55a44b993af1606453d91a07a60d409d7f03b581649d0e48fa73af12c638635ea4a645686ad7749fdb7abbd32579bba3c67e98ac82bc3f988b0f3c2fad11e6e707878fc2d9af7586b859b32ccad486d5e9e9cdd6d7b45b4c32eefb0d64bc92ec8e1b18b6be189b40c8bb0e13bfcd703696b5ad2313fb88460df78b5e59f273213945bb3be0370882cd538dc09e5ddd151b1c811dfef8c2925855ccd16d1f040bc1661511eb12d0f54191f9647f6ee7679dc31d5f3cd547ed2be4f14d1ce6f75eeef5c811f6ac92177a8183bdfa640b9c0351f70ca76a97e77fe6ada72d6ed3fdf8c23ffdf0cf5599a8cc76bf90ea09b15e2f1f0b31dbe3ea7e893b0f11e65de8e6d8b092a8c95f23220cf6b0ec252007cc5af04d20c58532fb92a9c30079a7cbeecfbe9e8c5ec6a45454c29c39b938eaec73bdc75f5f6d5ccfcb8bc07c29570cc7fedd59b867ccd26ad2d3275180780b17f4aaf3fbcaf4ecade1fcabd0fcd4c34f0adb6c868809295b62a612ab40e06fca18c2e49d019cfeae13f4a533884d37de92a7671bb1755798aee68e2b1b3df40aa443db4d3a80b75501867571a8b237550c426a517e566528d3658da8fc60aa11db91164df417344567c16b550d4fd00fe47f85e16a49fd714d27f39ebf124f2eae77723a487758a1b874a9940ea106751b80a783950ec6b1ada6b4e57c2e78f6442ca67805e7563e22fdf5cf6f627377436175fe27c83ccb5b4b4f06c2428ac17aa1bacf4217b80b6b185a74263ab19c36cc012ba58b045a7487d0b0893a0d91c288aa592329eec8adf3ad1a85a7636568dc57157e143c1910d3a219976332c5ec1f724a961675b534f39e197bceceb0638ee4e45b2f47c5c8e8a2b9119a53c7048c400994d0049d0a746d4a0e9f841510812cbc11a078796ae7191fef2b14b6763f2a235a4a0167d4de94a01103447c9a661c8ac3c13911092d504af87e9c2023e21a1eadca885324e1ca493be9efc62a924f2fe835dfef537a8039c643e686bc0792806ab057f5fdac80e511e04b95e9e958a943ca45ab2f7912077224bd23f6397ea04528661c7e7f14d4ea87f0df0b5617b948fb28e837877d63b6d7003794a29d4a4614f421bca86735fe20307f898c9867615a92398e2812be80c33d029442736bc28d0beb081bb53f838733d0d1c07979afbdd1bb3f6c84982436069284740d33f86893c55420e589777f490b757fc73baab93881abe4dfc439829b28a1b0afaa698d2bda6f8ce91b61dc882385a3189ed03824585fa7ae2683f98cf7d2d8e18c296e7043042a644376fcf31293d0f792f02cb4d33afb3014181d1a39268d61e77eaf6e1b0db4fe4d1ebbcda7fb9069a228d625ebfa368c0a29aab307880f2f51cce6e4f3e3f9ae0886fd22782e242344f6c24906dc8cd79b2305eaf0d8c437922afb204631a5eabbb9a97ac966618bfdf6ab503a810b2811359499cb7022a30cd07c408fa9a3dc8ab387e6e4b61a84089443864248b04727484d4fdff7fbc7e0deb9fc4aae38bd215f863959833cc50979893eb991bd01316efc7d77fc77387f6105fbf4b9343bf3fa97ad49f3f97335fc3534ee10a426a8cb0141c4ad304e0a5362c4a399055906feeb1ed1f4a2dc55366ee89f613f3c73566f6e4aac2ffd3bc7bf01d24c0dc233cde65ef4d329ed5fa065878017a744fba6a9c1df31061b8da865e1e8c7d914abe3e7cd7ec80b72bd17c5753704af6e0fe77282d2333b9afd722d74305f67819baaadc0c488b5cc41f244604edbfd189d349ab399b859477d8ef8291de4702ce99f67828456f54ffa53630c297382f0e23956ca9dac808038c77efe741b4b5563fa245ac45ec0518c42b06b940a29dca2ce990ea3ec499beeb9ec3984eec996580794e339c94fa50aab23652bc3c03f30451ca92f9202dc0b31e0a5bc38a591ebb95edb89ce1431807b89ee337b3698f2cbfbce42ec9144b949f056f09778d924c8fc81cb514597b064e59c53ccacc3d9ca3ceeb214680d9fe24159f1bb167fc0fa893f3f0b25a9acf8997b403fd0a5e669d479e368e15de5c8332bdca0fc30bb7bf0b4375ef842c646e1e78dcda79d4e2d7e0f6e2f78b5dc4b429fe4c4edcbcfec709508764bda6a369785d3d80e8d059436a5929c6942f6af628765793f418e9928ad476aafeb38aa42cb641915844506b9a1a912b8ddcdaac27f19de72cf0e9e07fec52d1522a80fed69f9aaa8567f0eae2be3d48e111e7327a34f8db83263a0f1113cc70f8d91b002f21510c665b95ef284bcfd00e2cf05cb6a97d1ae7bf9d9c0e60f911dffd2b7811b27c860b6c680522a4cac712002fcbc1997d658c14b79b1e0855c7099d8fdcf329fa1dea0227218db78c71826766a60304b8b8ace2360039571eeda72872920faebaebd48edbc78013bb743a50ab2f48d35757ac4a07e171e6cdcdc16591afc223c80c7a5fcbcbcb46167ad0395280b85819327ad9b3a4b5004110bcdeb4a33e201240061223e5bbb42387387a12a3869d2e09a415becf32a79bc8ac9e35c36e39f0cbd3ae8385a07de4e853d949d8c2b933d2ec0682cd4376ab48476f4931ffa83c94c81b78121da3201c71395d6831ec9602c43002dce73b399a0cf0362d3757f4ca55566fe548aca960f8d1b89d91fd7853daf0421e077dbb14dfa363311f5de19c190b550a35d93901156c751b6f637721dc4b1eadb16880cfefd63b2685023c1b3fa90e48755cccef75f53c4365321693737a7b65551a4c86c22d29acf8cf40bcbba144009332873cbe6a368cedd32913fa8014b9702cf4fe9c32094a027096c0d6c909b4c590bfe2095604971edb9b55aec6df83d8705a7ff5d677bc55e512e560078d728fe646d1fabaf2da4249d17a4c15bab7d9ac668e220803ba579a8a38680ab3065d6935a197091178712849c3c78b6d8ed9266d7904b83758519f93ada7dede63c4366e26960c1373304be71951b6e281729507ddc324a2d5b57f6d7ee31d836d3600f1cdb977e66ea38eebe8d34ef8eab9cf4798247375e553e39ec0a82b6bec38a89948f1ba4f9b22bd350e9d02fbc4e698ba8b3ba65b4bbafa1dfc99dd25f15bfeb161e1c708a56b7dedcf3169b81f6c41ddc5c890f55b74c64e7cef195993b114fa5aa3b279e04665ea287c494d42719c446729d9d2583f5a5934806295376e3ae4170ebc0dcad38fe622e58e6427bd1b57c98f9932f7c118f97557c5f85d4b64f1dcd75c7c8ab11eadcfc7a617c6d9aed3fdfa6d4d02790d35a5f917dd4acb852090decd274c9daee236827fec34ed1b36f71728b8e39c4924b413835728c4ffa13da25748ffa06ac20e876b73937415472b055abf5193429bfd2b759c9e35962c4057e5c83962e3890194a1dcc614c1d9ae5bef3b5498944acf9766d4a9689ea7ab617e5c389e87b67ac72af8af52d3e0d0a84aec4f336f51fd2a1515096806b53bc4890e9d38410cd23c9caa1d2c9588be6227e4400d50483325a15ef0cc05a2d6a7813e9758ed1a196d212761116c39c9fe06f3993e2801f333d143832baaad69d39ef531cba68c357f9f0056afef0ad3fd39d282dd1f9b15dbe3c6d9748a0addbebbeca839d7ac6cefd33b5d6797ebb3f9f0f9655a01db59710bb6baf960db825830fa3ad5a21120361dd15d67c083bcd2e81739bd247fc90f8c34b1c5ad0d305d1bcfc7cf279ed38af3073fa92f6f97142a03aed4c340321604edf379cae731d60824f1ab74ccd802e63d764a9c144e485b902fc3fd1be11c57a82a2f5a6360a77d67bc7cd258024af4e5adcfd617ac63a8c6add832356e49a59ebce5c10a86eccbce2c9b2a78b3b40c9697ae7fe47860675ec40c95cfefefb009d01e2e534226488687cef9392b821e8c08b013add74a2d66927ae7bdc244d90d5009aaa53b744d92165663369ef62f963a2be635d9002eeaa02bd9a31602a5906c455150ec9b05ef3df0baeedc8f8403332b525fd36eb407516e88449b864976ec7251e29f7673d14fdb343a47a2be5e28574dd8056c3a9929853ee69182db453f885bd79268d0a2fab9a357554763a3f1dd2d668cd9901380e0b8acf6a9734052949afc46e380a4c4bd828317e82dcbb7a25db8e1af231aadfed12ac5ffd02108fb6b3cf31b6fa82ddeb633ae61089c954556518a995050f3f5a1967b95922dba9d6103c9f3bca877189a30bcc9cd3902c22cfc0fd19c1d517f2717943940aacc3dcab03c6e2890c1a785a76481cc762ea1f7dcbf31619d1f2c19b8c08256b7f4a757cf0f45a666052a316284ed3d886033ea8b5d86608cd575a86050b41b390e30e111fa621ebc12f128bbdfb2bcb2bcf1de1fb3148f45ec8e48ee047dee74cf38de28f754ad4b604e7891b1bcadaa8858ac2be0a66a0d1f67dd377e18f64179d2f4a7aba4517c54d0116466209321f52e932fc4cc4b63700a54c923491e4d287be80b1548b6384d689d259cc9d4d0b7ea805ef647ecf60ec688dbf4139ed8c5287de01122995de0401ff160d3c12d98c98f281fdb22a965524e7f332a95ca52324296be965928202b9475116e9cc1d6da0cf827e4076b7d4a68cc46b1a7c0b2cdb96ed208068db8d64c0f2a8a66b6e56852090897fe486", @generic="6b3cc39e6a5791558742c991e19e1841bf3c567f487cabf0422b81c543e375f9fbc2a7bea6e313e716819449d27ffee5c145d4ab2d78e2", @generic="1b0d2c8b8c118ab9fbc8cd0eb5520460b9b1714d5c764702309e724e2d6a57324bb3fc647fc3", @typed={0x10, 0x82, @str='/dev/autofs\x00'}, @typed={0x14, 0x66, @ipv6=@local}, @generic="7da8f01a83e8337670bc10f67567f8fcacabb89643ae93158a74c41687adbbb79c9401796c5bd38abe630c14319cd2fd57a292cc132f0d08eb271c73002f0834c4bbbc2e32f26a1843c28f0b5f4911190f08e1d5308a993c6a6ce87978f98df704ea9ea18d8d88b1e94beff6671d653eba898cc28ffdd80a4748d6f630086ab0df522a48c8a0101ff0aab6fb250a5452468301c172af261d7cc58cf2c0bda9fe1d48d9d13cb87ffa195e31291e8de78f7ef50937cc8680c6979538ebc9b2d4e52f426960c4f178295650816e0923e51c7aaf2828a4e5025aa6815d"]}]}, 0x11c0}, {&(0x7f0000000200)={0x24, 0x41, 0x8, 0x70bd2b, 0x25dfdbfb, "", [@generic="814033a31aeae5b6e00bb1e060be2ff2048d"]}, 0x24}], 0x3, &(0x7f0000001a80)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r10}], 0x60, 0x40}, 0x20004001)

07:55:08 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x84\xbe\x05\x00', 0x1132})

07:55:08 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x200000000000000, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:08 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12")
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:55:08 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x1, 0x0, 0x0, 0x3ffe}, 0x80)

07:55:08 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x2, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

07:55:08 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYBLOB=',s'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:55:08 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x300000000000000, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:08 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2)
r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0)
ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f00000000c0)={0x4, 0x1, 0x2, 0x6e3, 0x1, 0xfffffffffffffff8})
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000150001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000f5ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb8}}, 0x0)

07:55:08 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000100)={@broadcast, @multicast1, <r1=>0x0}, &(0x7f0000000140)=0xc)
r2 = geteuid()
r3 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x3ff, 0x200142)
r4 = getpid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000180)={{0x8, 0x5, 0x8970, 0x79b, '\x00', 0xd07e}, 0x2, 0x4, 0x861e, r4, 0x3, 0x3, 'syz0\x00', &(0x7f00000000c0)=['^:\x00', 'trusted:]user.\x00', 'self\x00'], 0x17, [], [0x1, 0x7, 0x5, 0x5]})
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="982100001a00450c28bd7000fcdbdf25e0000002000000000000000000000000ac1414bb0000000000000000000000004e20ffe04e2100000a00800000000000", @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="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"], 0x2198}}, 0x0)

07:55:08 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x400000000000000, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2932.074852] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2932.160813] FAT-fs (loop1): Filesystem has been set read-only
[ 2932.256928] FAT-fs (loop1): error, invalid access to FAT (entry 0x00007400)
07:55:09 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x500000000000000, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2932.306776] FAT-fs (loop1): error, invalid access to FAT (entry 0x00007400)
07:55:09 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xb8}}, 0x0)

07:55:09 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYBLOB=',sm'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:55:09 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x85\xbe\x05\x00', 0x1132})

07:55:09 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x600000000000000, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:09 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12")
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:55:09 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x4, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

07:55:09 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000100)={@multicast1, @empty}, &(0x7f0000000140)=0xc)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@remote, @in6=@local}}, {{@in6=@mcast1}}}, &(0x7f0000000280)=0xe8)
sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x4a03fb2c81a18f80, &(0x7f00000bfff0)={&(0x7f00000007c0)=@getspdinfo={0x0, 0x25, 0xf0c, 0x70bd27, 0x25dfdbfb, 0x9, [@lastused={0x0, 0xf, 0x81}, @algo_auth_trunc={0x0, 0x14, {{'rmd160\x00'}, 0x0, 0x3e0, "59cab0"}}, @sec_ctx={0x0, 0x8, {0x0, 0x8, 0x1, 0x2, 0x0, "48555400c42a60b0ea3a7c83367137ef8a00ed"}}, @proto={0x0, 0x19, 0xff}, @output_mark={0x0, 0x1d, 0x6}, @algo_comp={0x0, 0x3, {{'lzjh\x00'}, 0x0, "4ddd24c34514b2b19b17f24d42f2524d177820428cfec20a2a82a4"}}, @algo_crypt={0x0, 0x2, {{'cbc-serpent-avx\x00'}, 0x0, "3f4b531c6212abf4dab16d6157d6e837ab2113babbe96bd4d52c3fe9d2804c79cb0087f6c1e19fc135d99c20225f9def266f41247453261824ea152761165db66c8e5441741b716efbccbee983d22556ac5165aa79b2afd911f49108c8816f07ee7257134bf1d1a746efb9d3921431c89ff236c60fc1579206043e824b9ec04a7260819c1e0176d8e86e5d8e1af3059074cd3830a4a6555543341bd2259177cd731b72f7d1efa8d4bd2980bdfbac3ad7c1bc52"}}, @migrate={0x0, 0x11, [{@in6=@dev={0xfe, 0x80, [], 0x1f}, @in=@local, 0x33, 0x1, 0x0, 0x3501, 0xa}, {@in6=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x18}, 0x3b, 0x2, 0x0, 0x0, 0xa, 0xa}, {@in6=@ipv4={[], [], @multicast1}, @in6=@remote, 0x3c, 0x4, 0x0, 0x3506, 0x2, 0xa}, {@in=@dev={0xac, 0x14, 0x14, 0x11}, @in6=@mcast1, 0x3c, 0x3, 0x0, 0x3501, 0x2, 0xa}, {@in=@multicast1, @in6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}, 0x6c, 0x0, 0x0, 0x34ff, 0xa, 0xa}, {@in6=@empty, @in6=@dev={0xfe, 0x80, [], 0x24}, 0x3b, 0x3, 0x0, 0x3505, 0xa, 0x2}, {@in=@multicast1, @in6=@mcast2, 0x3b, 0x2, 0x0, 0x34ff, 0x2, 0x2}]}, @algo_crypt={0x0, 0x2, {{'xts(twofish)\x00'}, 0x0, "172a17916c54bd271da628a6cc65b167f551e7ae82a4c279bf28a331aa49a7d33fd3e14c40c6ede628a1020038bb1bc3de07db47637eadf7c280c9e11b245d927ffbf765d4730fd479db59e822f7306a2072a9638bb851a2677f9a20d482f7e34f6b063c7d4c131a9a54e7f7bcad919ea1a2c8d9afa7d583a6f7cff570be8a0244f6d7355eedc399d747da00f3dae6d80de5cdc0460052f10250a66fc9771f4388322cc4e4d33bb60ecca86ae6f87a507b63dd4295bcf4102632579c9d5e45c32ea28652d3995804433f81d55771"}}, @algo_auth_trunc={0x0, 0x14, {{'sha224-arm64-neon\x00'}, 0x0, 0x180, "3d74b83825e3ea97959d939174efe6004b0b036e69483315c1bd5f3899f167885a3f0dde7b80e1890d2b7cfd46c64c7cef7bfd1d5ca2f6"}}]}, 0x148}, 0x1, 0x0, 0x0, 0x80}, 0x10020000000)

07:55:09 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x800000000000000, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:09 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x40000, 0x0)
setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040)=0x7, 0x4)

07:55:09 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x900000000000000, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2933.081375] __nla_parse: 9 callbacks suppressed
[ 2933.081386] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
07:55:09 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x86\xbe\x05\x00', 0x1132})

[ 2933.198212] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2933.217009] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
07:55:10 executing program 0:
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x100000000100, 0x0)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000040)={{0x4, 0x6, 0x2, 0x1, 0x7, 0x7f}, 0x8, 0x6, 0xdd, 0x4e, 0x2, "8b7d26e613136a8eb9c7d23a888f57baf40dd5bf2b2a406eed1a957b6edbf4f6c05474a8235392fa993289736a36d45693574a4c920e3d303a395a051a978c1adeebc7efb8011de0ca02df7de69ff1bc5abe83c319f53f501cf2680df2e83ae4a945572983b8cc0716d0cf69425f8b95c242ec5b129e986a670ba959351e4817"})

[ 2933.281170] FAT-fs (loop2): Filesystem has been set read-only
07:55:10 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0xa00000000000000, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:10 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYBLOB=',sm'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:55:10 executing program 0:
r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000205, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000080)={0x0, 0x3, 0x20000000})
membarrier(0x0, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x1, 0x0)
socket$inet6(0xa, 0x20800a2, 0x6)
openat$tun(0xffffffffffffff9c, 0x0, 0x40, 0x0)
r2 = gettid()
r3 = perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
write$FUSE_OPEN(r4, &(0x7f0000000080)={0x20, 0x0, 0x7, {0x0, 0x6}}, 0x20)
r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0)
fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0)
perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81bd, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x9, 0x8, 0x0, 0x100000000, 0x0, 0x0, 0xffffffffffffd5c2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xc, 0xffffffffffffffff, 0x8)
bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10)
io_setup(0xb30, &(0x7f00000000c0)=<r6=>0x0)
io_pgetevents(r6, 0x1, 0x1, &(0x7f0000000040)=[{}], &(0x7f0000000140)={0x0, 0x1c9c380}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$LOOP_CTL_ADD(r5, 0x4c04, 0x0)
clone(0x0, &(0x7f0000000040), 0x0, 0x0, 0x0)
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x800000c0045009, 0x0)
ioctl$int_in(r1, 0x800000c0045006, &(0x7f0000000080))
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x96bb, 0x1f, 0x2, 0x3ff}, 0x14)
sync()
socket$nl_xfrm(0x10, 0x3, 0x6)

[ 2933.460525] FAT-fs (loop2): error, invalid access to FAT (entry 0x00007400)
[ 2933.485604] FAT-fs (loop2): error, invalid access to FAT (entry 0x00007400)
07:55:10 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0xb00000000000000, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2933.558765] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2933.641236] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
07:55:10 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12")
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:55:10 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0xe00000000000000, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:10 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x6, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

07:55:10 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x87\xbe\x05\x00', 0x1132})

07:55:10 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0xf00000000000000, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2934.065661] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2934.149707] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2934.181122] FAT-fs (loop5): Filesystem has been set read-only
[ 2934.207353] FAT-fs (loop5): error, invalid access to FAT (entry 0x00007400)
07:55:11 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x1000000000000000, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2934.315141] FAT-fs (loop5): error, invalid access to FAT (entry 0x00007400)
[ 2934.357010] FAT-fs (loop5): error, invalid access to FAT (entry 0x00007400)
07:55:11 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYBLOB=',sm'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:55:11 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x1100000000000000, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2934.429528] FAT-fs (loop5): error, invalid access to FAT (entry 0x00007400)
07:55:11 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88")
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:55:11 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)

[ 2934.595094] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
07:55:11 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x88\xbe\x05\x00', 0x1132})

07:55:11 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x1200000000000000, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:11 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000400150001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xb8}}, 0x0)

[ 2934.796820] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2934.812523] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
07:55:11 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x1300000000000000, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2934.890494] FAT-fs (loop5): Filesystem has been set read-only
07:55:11 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x9, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

07:55:11 executing program 0:
r0 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x3, 0x800)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000040)=0xff, 0x4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000150001000000000000000000ff010000000000000000000000000001e0000001000000000000000000000000008c1470000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xb8}}, 0x0)
r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="5ad82cfbb16fdd816b19f5f760091c742d9526134dc1a6a28378930f62f38d3be20e016ab0a21604052a4c9de9d179d3e71ed65a8f1695d76c8c72bf9837177f9d8e048abc4e5004dbea33b00509eae02f89c08f5b104eaa52f2fcf8f51628f0a217bee6ccbd4d996a9b26db0c1162f3bbfef438e05373bc766c0beaf8cbfaa30a20512b3400a83a67ab8e0176acfdc79e6a5c519fb3a3917736b803274b1710c5d955e7460d22199e09b9acbc2196604fb84c1f7cacc145ed89e75ab801501ea1a520fdce5fcc4b168d8af9694677aef69b2eb32094a0e708ffde62a746614e96895361bc380ec880d6023afdbe3f16cd600cd3e3", 0xf5, 0xfffffffffffffffb)
keyctl$describe(0x6, r2, &(0x7f0000000240)=""/247, 0xf7)
syz_open_dev$sndpcmp(&(0x7f0000000340)='/dev/snd/pcmC#D#p\x00', 0x10000, 0x200)

[ 2934.945374] FAT-fs (loop5): error, invalid access to FAT (entry 0x00007400)
[ 2935.014509] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2935.017170] FAT-fs (loop5): error, invalid access to FAT (entry 0x00007400)
07:55:11 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x6000000000000000, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2935.081428] FAT-fs (loop5): error, invalid access to FAT (entry 0x00007400)
[ 2935.102236] FAT-fs (loop5): error, invalid access to FAT (entry 0x00007400)
[ 2935.103550] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2935.264410] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
07:55:12 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88")
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

[ 2935.316027] FAT-fs (loop2): Filesystem has been set read-only
[ 2935.395359] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
07:55:12 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',sma'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:55:12 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x80ffffff00000000, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:12 executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001dc0)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000001e40)='team\x00')
getsockname$packet(0xffffffffffffffff, &(0x7f0000001e80)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001ec0)=0x14)
getpeername(0xffffffffffffffff, &(0x7f0000001f00)=@ll={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001f80)=0x80)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000002080)={'syzkaller1\x00', <r4=>0x0})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000020c0)={<r5=>0x0, @broadcast}, &(0x7f0000002100)=0xc)
recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000002800)={&(0x7f0000002140)=@ll={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000002740)=[{&(0x7f00000021c0)=""/236, 0xec}, {&(0x7f00000022c0)=""/186, 0xba}, {&(0x7f0000002380)=""/156, 0x9c}, {&(0x7f0000002440)=""/197, 0xc5}, {&(0x7f0000002540)=""/174, 0xae}, {&(0x7f0000002600)=""/91, 0x5b}, {&(0x7f0000002680)=""/158, 0x9e}], 0x7, &(0x7f00000027c0)=""/22, 0x16}, 0x21)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002900)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@dev}, 0x0, @in6}}, &(0x7f0000002a00)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000002a40)={'team0\x00', <r8=>0x0})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000002a80)={@initdev, @multicast2, <r9=>0x0}, &(0x7f0000002ac0)=0xc)
getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000003080)={<r10=>0x0, @initdev, @remote}, &(0x7f00000030c0)=0xc)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000003100)={@multicast2, @multicast2, <r11=>0x0}, &(0x7f0000003140)=0xc)
getpeername$packet(0xffffffffffffffff, &(0x7f0000003180)={0x11, 0x0, <r12=>0x0}, &(0x7f00000031c0)=0x14)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000003200)={{{@in=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in6=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000003300)=0xe8)
getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f00000033c0)={@broadcast, @multicast1, <r14=>0x0}, &(0x7f0000003400)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000003440)={{{@in6=@remote, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r15=>0x0}}, {{@in=@local}}}, &(0x7f0000003540)=0xe8)
getpeername$packet(0xffffffffffffffff, &(0x7f0000003580)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000035c0)=0x14)
getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x27, &(0x7f0000003f00)={@multicast2, @multicast2, <r17=>0x0}, &(0x7f0000003f40)=0xc)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000049c0)={@rand_addr, @loopback, <r18=>0x0}, &(0x7f0000004a00)=0xc)
accept$packet(0xffffffffffffffff, &(0x7f0000004b00)={0x11, 0x0, <r19=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000004b40)=0x14)
accept4$packet(0xffffffffffffffff, &(0x7f0000004b80)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000004bc0)=0x14, 0x80000)
accept4$packet(0xffffffffffffff9c, &(0x7f0000004c00)={0x11, 0x0, <r21=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000004c40)=0x14, 0x800)
sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000054c0)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000005480)={&(0x7f0000004c80)={0x7c8, r1, 0x800, 0x70bd25, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x190, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0xec, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0x298, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xab31}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r11}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x45}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x7ff}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r13}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r14}}}, {0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x44, 0x4, [{0xfffffffffffffff7, 0x1, 0x6, 0x80}, {0x1, 0x40, 0x200, 0x7ff}, {0x6, 0x81, 0x2, 0x1}, {0x3, 0x10000, 0x80, 0x52}, {0x8, 0x2704, 0xffffffffffffffc1}, {0x81, 0x1, 0x2eca, 0xffffffffffffffe0}, {0x8, 0x7f, 0x0, 0xfff}, {0x7ff, 0x80000000, 0x6, 0x4}]}}}]}}, {{0x8, 0x1, r15}, {0x44, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x7d}}, {0x8, 0x6, r16}}}]}}, {{0x8, 0x1, r17}, {0x234, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r18}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r19}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r20}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x4c, 0x4, [{0x1, 0x80, 0x400, 0x5}, {0x401, 0xffff, 0x7fffffff, 0x1}, {0x7, 0x3, 0x0, 0xb65a}, {0x9, 0x720b, 0x1ff, 0x6}, {0x6, 0x689060a2, 0x4, 0x6}, {0xfffffffffffffeea, 0xbff, 0x5, 0x3}, {0x3, 0x3, 0x1, 0xbe5}, {0xfffffffffffffffc, 0x9, 0x3, 0x7cd2}, {0x1, 0x10000, 0x0, 0xaf3a}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x40}}, {0x8, 0x6, r21}}}]}}]}, 0x7c8}, 0x1, 0x0, 0x0, 0x40}, 0x841)
r22 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r22, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)

07:55:12 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x89\xbe\x05\x00', 0x1132})

[ 2935.518685] FAT-fs (loop2): error, invalid access to FAT (entry 0x00007400)
[ 2935.567863] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
07:55:12 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0xc, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

07:55:12 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x9effffff00000000, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2935.622809] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2935.652782] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
07:55:12 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xfffffffffffff800, 0x2a0800)
getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000180)={'nat\x00', 0x0, 0x3, 0x81, [], 0x1, &(0x7f0000000040)=[{}], &(0x7f00000000c0)=""/129}, &(0x7f0000000200)=0x78)

07:55:12 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0xda17000000000000, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2935.745629] FAT-fs (loop5): Filesystem has been set read-only
[ 2935.752129] FAT-fs (loop5): error, invalid access to FAT (entry 0x00007400)
[ 2935.773898] FAT-fs (loop5): error, invalid access to FAT (entry 0x00007400)
[ 2935.867223] FAT-fs (loop5): error, invalid access to FAT (entry 0x00007400)
[ 2935.875414] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2935.978770] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
07:55:12 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0xf0ffffff00000000, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:12 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x8a\xbe\x05\x00', 0x1132})

07:55:12 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0xf, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

[ 2936.235526] FAT-fs (loop5): error, invalid access to FAT (entry 0x00007400)
[ 2936.379919] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2936.412815] FAT-fs (loop2): Filesystem has been set read-only
[ 2936.450220] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2936.532567] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2936.566942] FAT-fs (loop2): error, invalid access to FAT (entry 0x00007400)
07:55:13 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88")
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:55:13 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2)
write$vhci(r1, &(0x7f0000000240)=@HCI_VENDOR_PKT={0xff, 0x81}, 0xfffffffffffffe0f)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000150001000000000000000008ff010000000000000000000020000001e000000100000000000800000000000000000000000000000a0000000000000098b95409b3bbf347866083bc791fa722147fbe768eb6655994d61fec292cc9b5ad6d45c6ac7120257e39e2a11da05e6ba4a74ad17215dc1b7f10e51a69792357ac6cd97decb3c66050f275fee4a638a9627af8ae", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xb8}}, 0x0)

07:55:13 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0xfcffffff00000000, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:13 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',sma'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:55:13 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x8b\xbe\x05\x00', 0x1132})

07:55:13 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x10, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

[ 2937.014971] FAT-fs (loop5): error, fat_get_cluster: detected the cluster chain loop (i_pos 0)
07:55:13 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0xffffff7f00000000, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2937.080538] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
07:55:14 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x10080, 0x0)
ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f00000000c0)=""/84)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)

07:55:14 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0xfffffffffffff000, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:14 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x12, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

07:55:14 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
write$FUSE_STATFS(r1, &(0x7f00000001c0)={0x60, 0x0, 0x1, {{0x7, 0x9, 0x5448, 0xbf6, 0x1000, 0x3d16, 0x8, 0x3}}}, 0x60)

07:55:14 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x8c\xbe\x05\x00', 0x1132})

07:55:14 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:14 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
poll(&(0x7f0000000040)=[{r0, 0x9}, {r0, 0x2000}, {r0}], 0x3, 0x3)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x400000, 0x0)

07:55:14 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b0")
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:55:14 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',sma'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:55:14 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x19, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

07:55:14 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x800, 0x0)
ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000300)=""/150)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
connect$unix(r1, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x35)

07:55:14 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:14 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x8d\xbe\x05\x00', 0x1132})

[ 2938.155097] __nla_parse: 5 callbacks suppressed
[ 2938.155107] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
07:55:15 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2938.270063] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
07:55:15 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x29, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

[ 2938.351916] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0)
07:55:15 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:15 executing program 0:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x100, 0x0)
bind$nfc_llcp(r0, &(0x7f0000000240)={0x27, 0x1, 0x1, 0x7, 0x85e, 0x5, "25ad186bb53c327b5185e2721e19f4fa783759e4b7b41399f737fd77e5bf5125847b1c7bb34e357fb400032b52fe886abe3e7e27b2c83d4c4845d3ac87b7a8", 0x1c}, 0x60)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000150001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}}, 0x0)

[ 2938.409355] FAT-fs (loop1): Filesystem has been set read-only
[ 2938.526905] FAT-fs (loop1): error, invalid access to FAT (entry 0x00007400)
[ 2938.540407] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2938.587582] FAT-fs (loop1): error, invalid access to FAT (entry 0x00007400)
07:55:15 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2938.635270] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
07:55:15 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19a, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x4040000)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x800, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000040)={0x3ff, 0x1, 0x2340, 0x4, 0x7f, 0x1, 0xfffffffffffffffc})

[ 2938.680088] FAT-fs (loop2): Filesystem has been set read-only
[ 2938.741938] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2938.754305] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2938.773696] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2938.869421] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
07:55:15 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b0")
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:55:15 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:55:15 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x8e\xbe\x05\x00', 0x1132})

07:55:15 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:15 executing program 0:
r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x77b, 0x109700)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x2, 0x7, 0x0, 0xffffffff80000000, 'syz0\x00', 0xfffffffffffffdb2})
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b800000015679dd0ef91779ad10001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}}, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0)
ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f0000000040))

07:55:15 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x39, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

[ 2938.914077] FAT-fs (loop2): error, invalid access to FAT (entry 0x00007400)
[ 2938.937462] FAT-fs (loop5): error, invalid access to FAT (entry 0x00007400)
[ 2938.944778] FAT-fs (loop5): Filesystem has been set read-only
07:55:15 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:16 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)

[ 2939.262197] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
07:55:16 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2939.333398] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2939.353654] FAT-fs (loop5): Filesystem has been set read-only
07:55:16 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000150001000000000000000000ff010000000000000000000000000001e000000100000000000000000000050000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xb8}}, 0x0)

[ 2939.435403] FAT-fs (loop5): error, invalid access to FAT (entry 0x00007400)
07:55:16 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:16 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x49, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

[ 2939.582581] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2939.867923] FAT-fs (loop5): error, invalid access to FAT (entry 0x00007400)
07:55:17 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:17 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x400000, 0x0)
ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f00000000c0)=""/161)

07:55:17 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b0")
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:55:17 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x8f\xbe\x05\x00', 0x1132})

07:55:17 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:55:17 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x59, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

[ 2940.417182] FAT-fs (loop5): error, fat_get_cluster: detected the cluster chain loop (i_pos 0)
[ 2940.456023] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
07:55:17 executing program 0:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4401, 0x0)
mq_notify(r0, &(0x7f0000000080)={0x0, 0x47, 0x3, @thr={&(0x7f00000004c0)="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", &(0x7f0000000180)="89e1a7306fe69803da54e3b6ff717b62dd49b64da48c394c9a5f076fae7c1784f9ec89e73b474449d84b30d1b110fd99e681a1d1f99760d6d4dfd60d829cb750aa49e82402"}})
prctl$PR_SET_FP_MODE(0x2d, 0x2)
mq_notify(r0, &(0x7f00000003c0)={0x0, 0x22, 0x4, @thr={&(0x7f0000000200)="68960457d1084a6d2d9d6ba2691f2b615484306ed2a7427118e56f35d5001478855804d09095c48d5fdb2c5b8030c329b6a1de86ee577e605bc5a70d4c60c14e843fa3940593ae414c67726cd02f38e2fd6fc5b68a172e828cdf332334e875a693ffe52d41b8c6954d733521dad1ad01fcaaac9b4aefc8c2ea19cde5c9db4220d3f13f26f74515f966ef", &(0x7f00000002c0)="4702e24b037957993e9537a5a8829d55d09c28dc5dc45762e0ec2364684e4c7cc88f88ddd9082b35b96a525ee69ea6ebe884d9d2d25f78108c6bc02af08dbb98c971cf2ed94a90d0d3fde763675c7c55e21d9c400195bd1a37cf25dfd760cdd2405baf565b28ae2bd5d05cf8f4229c25b8b44cd6c192bbb52b260c6b86d3ad21aaaca6e0905f689b5790cd3e4dfdf748a8e38f50250ae8d993c508206a79c32e400a0913e51eebfa4d450102e0c1608786edf43bf2b7f1917547057ba6f152306621bc1f06168872c3f854a2f2321f58065f8baee6c89ce04d52b9"}})
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000014c0)={0x3, 0x5, 0xdb9, 0x3f, 0x9}, 0x14)
lsetxattr$security_smack_transmute(&(0x7f0000001500)='./file0\x00', &(0x7f0000001540)='security.SMACK64TRANSMUTE\x00', &(0x7f0000001580)='TRUE', 0x4, 0x2)
ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000000c0)={0x0, @reserved})
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x80)

07:55:17 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2940.475796] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2940.662757] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
07:55:17 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:17 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x69, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

07:55:17 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0xe)

07:55:17 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:17 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000150001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000100000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xb8}}, 0x0)
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x311880, 0x0)
ioctl$KVM_GET_NESTED_STATE(r1, 0xc080aebe, &(0x7f00000004c0)={0x0, 0x0, 0x2080})

07:55:18 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x90\xbe\x05\x00', 0x1132})

[ 2941.218659] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2941.238102] FAT-fs (loop2): Filesystem has been set read-only
[ 2941.318583] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
07:55:18 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:55:18 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:18 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r1=>r0})
getpeername$packet(r1, &(0x7f0000000240)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14)
fstat(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000004c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x1b}, @in=@remote, 0x4e23, 0x9, 0x4e21, 0x100000000, 0x0, 0xa0, 0xa0, 0x3f, r2, r3}, {0xffffffffffffffff, 0x5, 0x10000, 0x401, 0x7, 0x1, 0x40, 0x80}, {0x3, 0xfffffffffffffff9, 0x2, 0x4000000000}, 0x8, 0x6e6bb6, 0x0, 0x1, 0x2, 0x2}, {{@in=@local, 0x4d6, 0xff}, 0xa, @in6=@mcast1, 0x3507, 0x3, 0x0, 0x8, 0x100000001, 0x200, 0x101}}, 0xe8)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000180)={'nat\x00', 0x0, 0x3, 0x87, [], 0x3, &(0x7f0000000040)=[{}, {}, {}], &(0x7f00000000c0)=""/135}, &(0x7f0000000200)=0x78)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000150001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000002000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001700000000000000000000000000000000"], 0xb8}}, 0x0)
r4 = dup3(r1, r1, 0x80000)
fsetxattr$security_evm(r1, &(0x7f00000003c0)='security.evm\x00', &(0x7f00000005c0)=@ng={0x4, 0x3, "d1292a9bab5d5747"}, 0xa, 0x1)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r4, 0xc0605345, &(0x7f0000000340)={0xf6, 0x0, {0x2, 0x2, 0xffff, 0x0, 0x1}})

07:55:18 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

[ 2941.375757] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2941.401382] FAT-fs (loop2): error, invalid access to FAT (entry 0x00007400)
07:55:18 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x79, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

07:55:18 executing program 0:
r0 = accept4(0xffffffffffffffff, &(0x7f00000003c0)=@rc, &(0x7f00000001c0)=0x80, 0x800)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000440)='tls\x00', 0x4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_ifreq(r1, 0x8991, &(0x7f0000000380)={'bcs\x00\x00\x00\xd3\x80\xfe\x00', @ifru_addrs=@in={0x2, 0x4e24, @rand_addr=0x10000}})
r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xff4, 0x80100)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000000040)={0x8, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @broadcast}]})
close(r2)
sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000150001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}}, 0x0)

07:55:18 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:18 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:18 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b800000005000100000000000200ff010089830000000000deffffffffffff00e0001a00000000000000003bfff31ce424b5cccf6b4400000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xb8}}, 0x0)

[ 2941.976417] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
07:55:18 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x91\xbe\x05\x00', 0x1132})

07:55:18 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2942.017970] FAT-fs (loop2): Filesystem has been set read-only
[ 2942.087968] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
07:55:19 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x358, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xfffffffffffffe32}, 0x1, 0x0, 0x0, 0x40}, 0x0)

[ 2942.166532] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2942.228546] FAT-fs (loop2): error, invalid access to FAT (entry 0x00007400)
07:55:19 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:55:19 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:19 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000150001000000000000000b0106700000000000000040000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xb8}}, 0x0)
pipe2(&(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x4000)
ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000000c0)=""/212)

07:55:19 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x89, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

07:55:19 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',s'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:55:19 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:19 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000000040)=0xe8)
lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', <r3=>0x0})
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c0200001100000128bd7000fcdbdf25ff020000000000000000000000000001000004d60a006c0008000c001c070000e40006006ce8dd0ba9fb7877b5ef4c4ae4b0fc2f7f0000010000000000000000000000004e2400024e2400010a0080a008000000", @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="fe880000000000000000000000000001000004d200000000ac1e0101000000000000000000000000040000000000000003260000000000003f00000000000000010000000000000005000000000000000300000000000000030000000000000007000000000000005f6700000000000004000000000000000900000000000000090000000a000000ffffff7f040066c701e58305fb0000000000002cbd7000000000000a0003907000000000", @ANYRES32=r3, @ANYBLOB="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"], 0x26c}, 0x1, 0x0, 0x0, 0x4}, 0x0)

07:55:19 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x92\xbe\x05\x00', 0x1132})

07:55:19 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:19 executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/pr\x8bc/sys/net/ipv4/vs/expire_quiescent_temp\xd4\xaa\xe6)l', 0x2, 0x0)
getsockopt$nfc_llcp(r0, 0x118, 0x7, &(0x7f00000000c0)=""/139, 0x8b)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)

07:55:19 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:19 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x99, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

[ 2943.245929] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2943.302468] FAT-fs (loop2): Filesystem has been set read-only
07:55:20 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:55:20 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000000)={0x0, @speck128})
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)

07:55:20 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:20 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',s'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

[ 2943.400699] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2943.423181] __nla_parse: 12 callbacks suppressed
[ 2943.423191] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
07:55:20 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2943.459410] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2943.470036] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2943.480181] FAT-fs (loop2): error, invalid access to FAT (entry 0x00007400)
07:55:20 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = dup(r0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x6, 0x40174})
write$P9_RXATTRCREATE(r1, &(0x7f00000000c0)={0x7, 0x21, 0x2}, 0x7)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)

07:55:20 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0xa9, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

07:55:20 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x93\xbe\x05\x00', 0x1132})

[ 2943.650142] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
07:55:20 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:20 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000150001000000000000000000ff01000000000000000000000000000126e00000010000e9000060f5380b00000000000000000000000a00000000000000624f683570b6eea43d32b05f3bbf7b155f0a441048df4884164c5e30d5c89235010cce2b6d0f6de08443d51244758b075e6b98dae59840468d3a426ab24db969d0b416", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000067a05c0687379cc123fb06d431b1000000000000000000000000000000000000000000f68e5921a700000000000000ff7f00000000000000000001000020000001fc00000000000000000000"], 0xb8}}, 0x0)

07:55:20 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2943.941406] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2944.044264] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2944.103527] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2944.135473] FAT-fs (loop2): Filesystem has been set read-only
07:55:21 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2944.184503] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
07:55:21 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:55:21 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={<r2=>0x0, 0x7f, 0x243ed5b54992835}, &(0x7f0000000140)=0xc)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYBLOB="7f00860073400ca5422515ec32ab8f5bd3c685fcecad2b41c46b0e4027add76f27fc9511ba04b4abaa57fa6b53a50bd318333ef3bbbcf9bed56fa9df743d71489840c57e7f58c2dccfaf6901a8d61e0801ebe7cf6e43e859d8ba628f54313578ae58238c68057316baf312ac4ec31980eb0655cd664f76291036047cc10c79a3daa3a39221cae66ae79a3bbf1c9a593e4a20e2a6c371bd0d0c00cd"], 0x8e)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
r3 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x2, 0x800)
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r3, 0xc008551b, &(0x7f0000000040)={0x132, 0x20, [0x81, 0x1, 0x2000000000000000, 0x3, 0x200, 0x4, 0x4, 0xffffffff]})

07:55:21 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x94\xbe\x05\x00', 0x1132})

[ 2944.277809] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2944.304250] FAT-fs (loop2): error, invalid access to FAT (entry 0x00007400)
[ 2944.362689] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
07:55:21 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',s'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:55:21 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:21 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0xb9, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

[ 2944.445665] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
07:55:21 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000280)="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")
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000000000)=0xe8)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@delpolicy={0x50, 0x14, 0x2, 0x70bd26, 0x25dfdbfb, {{@in6=@remote, @in6=@remote, 0x4e23, 0xfffffffffffff801, 0x4e21, 0x70, 0xa, 0x20, 0xa0, 0x32, 0x0, r1}, 0x6e6bb5, 0x1}}, 0x50}}, 0x0)

07:55:21 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:21 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x95\xbe\x05\x00', 0x1132})

07:55:21 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@loopback, @in6=@loopback}}, {{@in6=@mcast1}, 0x0, @in=@broadcast}}, &(0x7f0000000040)=0xe8)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x100, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40002}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0xe8, r2, 0x101, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xeee1}]}, @TIPC_NLA_BEARER={0x54, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000001, @empty, 0x2}}}}]}, @TIPC_NLA_BEARER={0x4c, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000000)={0x2, [<r4=>0x0, <r5=>0x0]}, &(0x7f0000000080)=0xc)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000001c0)={r5, 0x2, 0x7}, &(0x7f0000000200)=0x8)
getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f00000003c0)={<r6=>0x0, @empty}, &(0x7f0000000640)=0xc)
getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000023c0), &(0x7f0000002400)=0x4)
stat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0xfffffffffffffd00, &(0x7f0000000380)={&(0x7f0000000740)=@updpolicy={0x0, 0x19, 0x20, 0x70bd27, 0x25dfdbfb, {{@in=@broadcast, @in=@rand_addr=0x1e8c, 0x4e22, 0x0, 0x4e21, 0x3, 0x2, 0x80, 0xa0, 0x7b, r6, r7}, {0x80000001, 0xfffffffffffff800, 0x10001, 0x0, 0x3, 0x7, 0x5, 0x7}, {0x8, 0x5400000000000, 0x22, 0x5}, 0x3, 0x6e6bb5, 0x2, 0x1, 0x3, 0x1}, [@sec_ctx={0x0, 0x8, {0x0, 0x8, 0x1, 0x3f, 0x0, "503de81a5eccdac7e14ed89c02da47b2412459bbfbe9"}}, @algo_auth={0x0, 0x1, {{'sha3-512-ce\x00'}, 0x0, "47f9ebc2e07839321dad2051720af8559a5092e03f17dc2199f15a5adddff521a0813435484c7c8b6e2e9ca31b4cd26652d27c5c12ee828e31a1e375040506170c311c643d237fc765db7f8d92ef3a448dda5005f5b721e195778373e1894d1c37b1a5299326b880bca97196f126245fe629f76d73836e8923c98980ac2d69048adbc9d0e5850c1874f33686da88d56ade70c2afed1226923f69f2944c9613"}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4000090}, 0xffffffffffffffff)
sendmmsg$inet_sctp(r3, &(0x7f0000002300)=[{&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x0, @remote}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f0000000580)="88bd4a676505797f014945569d4ee77ece1320673d935319f9d75bfa3d28c95577740fdc2049e79aaca2ddc56adb584649a64d08b6bed6a4774a1e642bd0385224307b06c62ab81e4efaa02d1b8b5db58ccb84e8", 0x54}, {&(0x7f0000000940)="8b244b52e9b53752de2810a66ef2c3446fbb79e835e91cd3faa856c626366fdaa0e0331c54bd68fc3829829584aa74e0960cebc5c3ac7039c656d3cafd317f574eab6bde72698f8a0c0e66149aafb469519fe7aa0fdbad28f7e54b26b65acc8306a812ee1dca5ba4b477b61c3554980207ce46b69432b6475f77eeebf32f950b4ee3d432fb80f6c30a53e920d28e173df8d7ad8986f9eb36f48a3f07bc8f4617b008d37da60309bea8cc1aabc34638b471f925e786577626ce7e7f2bbdead38f9d488bc9f2840652725a97e3", 0xcc}, {&(0x7f0000000a40)="abc80c2f5d35831393a7c53923fcef46db27049e372a5b7dd373424777b97ff7574ad2a6f5f17233ef5904d9903193fc8d8ea38a2e6801968b54eeb722772f298dd41c4b1b1676b938", 0x49}, {&(0x7f0000000600)="1f98ff7690b124a3ef3db465c49908dbe7721b45a3b174d17cfb6beb81470a24caf031287b960d8b4521edcd2698608ff58fb2e655abf732", 0x38}], 0x4, &(0x7f0000000b00)=[@authinfo={0x18, 0x84, 0x6, {0x6b}}, @init={0x18, 0x84, 0x0, {0x7ff, 0xff, 0x4, 0x4}}], 0x30, 0x4000}, {&(0x7f0000000b40)=@in={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000000b80)="2b447f2070194f2d6c292623857b43251bd4e7450a3f5c0e209b09c2090451747f3e595681f03b0082f61efcfed04448bde22917ff408eba23c73adfd85d84710acb67641c985d5fc03f3b07157f5a3f06b99e83281f2def027b7c8045d9c400390e27eac281a98d1249330bd82b31ca18f3cccc9848f57367f7ed34470b9a67d747b95a8777174e40f5360c7b8fd7e8e0cbb6e8155a680f1f5f0a834286ab7746583e3f0faf87ac153fe1e7113c54016959180dab0d", 0xb6}, {&(0x7f0000000c40)="9d30f1e91afc9335a8cca33da577852b901be947ca90aeb861ac4b83b263e57721bc7f727af74a1c453247346db2fb1379fda8db0f80458dd46f541ebdf89b2cb91bb9f8e18bcfc23507af1380aea7f7f4b3b898957ac67ad7b5b9e7c6ed1a2a9da87e7231e622978564725118a571a9d04f7313a9ebfc845beb814e673b61b6ddc2a102a7e33366883ececc76f7aaf0785f3ce7a6a33a063d81afc394864852efd44756f9538d3b86af628e7c084dc19192b9791d874e8632fa5edf4dc0b049a28f4bbbe0feae711bfc8a746563a136ad2fa1a5403182ed2fbee02905f7420c2bc9c5aa", 0xe4}], 0x2, &(0x7f0000000d80)=[@authinfo={0x18, 0x84, 0x6, {0x81}}, @sndrcv={0x30, 0x84, 0x1, {0x3, 0x9, 0x8, 0x7f, 0x8000, 0x9, 0x0, 0x1000, r5}}, @authinfo={0x18, 0x84, 0x6, {0x8}}, @dstaddrv6={0x20, 0x84, 0x8, @loopback}, @sndinfo={0x20, 0x84, 0x2, {0x2, 0x2, 0x73, 0xfffffffffffffff8, r5}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x4}}], 0xd0, 0x40000}, {&(0x7f0000000e80)=@in={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000002200)=[{&(0x7f0000000ec0)="e767a5db514855e2a9dd84fe2a6a64751c8ddba813a7bd2caa0d3da37a7100d550057f0023236dbe0d9535c3fab5145bd2196295f9dde941eac87ae8cce75dce7e855df2c812c1f37279135ac29a1f6f6222ccbaa1ea8a29e8ca539cbdca91068cdf897b4e1a4d43a7689e8e1b0029bc919a32fbcb021f8668718c07ff2ab23c4d5593da788664b7814733df450504215b79e9fb29885ef4c7918dee8f104fef17d4b32f539062fbf4dc105ee941e0f37ef8916f347661bcaefc98db94d62398", 0xc0}, {&(0x7f0000000f80)="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", 0x1000}, {&(0x7f0000001f80)="08428d799014be8fa6c093e6053bda437b70fd3913c4211ac1331f870ae195da89b84d0b97a7587f33574266fe3907476535e98d5d13147e4299941f9a1f499e74cad2e9dac17dba91e1507416d793c009e696c1bafcb54885d5993c222a8a8e6b12262e051c24c1f3402e54804c1dc205cebfb29dc78eb390352c24db1c5901aa9c0a18f9616f57699324c4bf1d8953ceb32d9c167edf17112f7fa6a15fec3a0121602565c736d288fbbf60be1121843cb2ce647f07752d35c2cfe5aa717d1c819edd768c59bb2eff504393a5aa9d6bacec5b242c8b71c74b8c51c6da902a44b7f5f8a66eebcef18f7dc53f1851", 0xee}, {&(0x7f0000002080)="c0c1cd9b599a6f5412308ef5993fdd48120de06eee55f9521069e3770ee66067e581ae5e8f671c", 0x27}, {&(0x7f00000020c0)="c92ff4b052acfb982ce4940dec0d0699737ea7a5ef91b0f5829c93a4d05f41f700e6c75effe689a6ecb348c71c3f876dbaee6762324b82674b7178588174705154009b9ddfc95058e71ac5deb0d0901b7f3bc8f8e0a5c3d2a044f9e2c32087f39f5598063beb3a39c42cee841b980314a92f76c288791a707e441780467773b86083ac0a0899379697994d22da74b0794bb98aba4413e0b9a0217606686e3af5bae8835be6456a1f586268a83510016710cc883a1b391d7928a2f078ed8aca809bb673a97ffd1a96f28b3b2850329dc240bbcd4d1be2b68ad55421b490a0f3fd3ddf", 0xe2}, {&(0x7f00000021c0)="79dd61752e3e75085b5fdc2d129f0950fc41a697de6aada33363de613d39c83cfd3f085d108e44", 0x27}], 0x6, &(0x7f0000002280)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x8000, 0xfffffffffffffff9, 0x1000, r4}}, @dstaddrv6={0x20, 0x84, 0x8, @remote}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x58, 0x10}], 0x3, 0xc800)

07:55:21 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:21 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0xc9, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

07:55:22 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:55:22 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
socket$tipc(0x1e, 0x7, 0x0)

07:55:22 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2945.285807] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2945.313503] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2945.340886] FAT-fs (loop2): Filesystem has been set read-only
[ 2945.358228] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
07:55:22 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',sm'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:55:22 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x96\xbe\x05\x00', 0x1132})

07:55:22 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2)
write$UHID_SET_REPORT_REPLY(r1, &(0x7f00000001c0)={0xe, 0x8, 0x1, 0x1, 0xfe34, "b42c22afc8781437524c044a40c2d21227c8e7ce38166c13ee2ff851944e95a8b00ded9b7643182656390fbfbd4537faa99d8f7606065960b4041cbd20f01c386b3c26432c258ae5b7433673891247e281ae8e3fb840c677322ab7ad706b5239904744649fa7084f3d42dbef9c8af43c8c5f53bc4f01eaf4da4741e07ca46baacb2b45879f90bc8aeed9b733f09a99acf477f6830cdba57429586342e98156906e5001006e753175e327550d468c7f7f84a0a48dcfa9332d09ef32facfb4f79d0395c2ffd2a3cedf9f5dac4f21e611172baa5fb9ba9876c399434683791de86ad5f636644717121673ff6538cb8d29646e24bee929da53b89f09588cb125a2829d3de40e0c41329bedc949aca50bb43b80e556b9efad040027c27b8b0a58bf56390f11ecc2485fafc9c251fa9346c6eafafdfdef5aec1b2ff6e2fd65a3f26277821a3b40abe7305ffaa0a34925d97cac323b1110d9abf5a768025a23698823767412adf7b55aa28fbf4bef7112d2892e3090c6a5bb91142b6dfca92e7a1d207282de84f386d0ac0b6a64603944bc53d5c82d5853c5da5cbb71365d54301c0be716837229fc5a0900e9cda84b1d81021c73092e5b39b3c3b0d350"}, 0x1c6)

07:55:22 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2945.446048] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2945.505541] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2945.550171] FAT-fs (loop2): error, invalid access to FAT (entry 0x00007400)
[ 2945.564776] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
07:55:22 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:22 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0xd9, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

07:55:22 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000150001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a282e5608b9e9a300000000b69f429d9e9b000000000000000000f513e45550f0eefa08f0bdb0b99323f030b524bb708f1640ee77b2076284a18a196dbfe15e2fadcecd2700510472023d5d1c80883d08472859d5378fa81b"], 0xb8}}, 0x0)

07:55:22 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:22 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000200)={<r1=>0x0, 0xd1f}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000280)={r1, 0x1}, 0x8)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
r3 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x5, 0x48000)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000040)={<r4=>0x0, 0x8}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000180)={r4, 0x80, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x2, @rand_addr="c53f2d85de7babf44c4be105a4ee877f"}, @in6={0xa, 0x4e20, 0xb2f, @remote, 0x1c000000000}, @in6={0xa, 0x4e23, 0x164, @dev={0xfe, 0x80, [], 0x1f}, 0x4}, @in6={0xa, 0x4e24, 0x0, @loopback, 0x1}, @in={0x2, 0x4e23, @multicast1}]}, &(0x7f00000001c0)=0x10)

07:55:23 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:55:23 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x40c000, 0x0)
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f00000000c0)={0x4, &(0x7f0000000040)=[{<r2=>0x0}, {}, {}, {}]})
ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f00000001c0)={r2, &(0x7f0000000100)=""/159})
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000003c0)={0x7fff, {{0xa, 0x4e23, 0xe140, @local, 0x1ff}}, {{0xa, 0x4e21, 0x1, @mcast1, 0x3}}}, 0x108)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xb8}}, 0x0)

07:55:23 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:23 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',sm'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:55:23 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x97\xbe\x05\x00', 0x1132})

07:55:23 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:23 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0xe9, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

07:55:23 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
r1 = socket(0x4, 0x7, 0x88c2)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000040)=0xe8)
sendmsg$nl_generic(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x50000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)={0x668, 0x30, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@generic="10b2dc186c11bc031ba805af007acbfbeb590f2333690687bc1f288c0b5a604102df3c440710548ee37cc76cc562037bb287d2a67039677fd9ebf71cce79a52fce9b767dded216811b2b7d260c48929f88a64124f602b9cf96e2cfa1519dd34959568db7ce43e119cf5302386c52de58ad26a6aba014a650b012d9e840d88e0f967d84e7e67f0a97e602aa7045b841f66f9b479163e1a701a7d1d511a2c7a911ff89e871e138438f40c3663b24712960a0d93f339a176851405805bd465e8a9cec543fa3b0d8eb0158bf10de8d1753750c4e0cea189356fcfbc2202ae7c5c08d94421cc2bb2316fce977985e7c6cb1ba0085", @nested={0x17c, 0x41, [@generic="01b8652ed94a4fd18b3c6f62e8ba7570b849b79f559397eb2fb5aa85886d89a6a18049a529128ba24177719fc81dab6f8ca9bf20ecfb3eae55c1505e3ae2bf8ad680d6d4f65c02f3c706dcf548f23250af4ed46581376ef9489ca51a775c3f9e63cad4063cf53f9890c187ce9baffb2dc65ff193280b5a37402456a9444b83059b177e9fb5075268ee5d4ead0f5d249bc5891edc8d22f83f6b4391a8028b631aabc04f5f685111bb702ab8df59fc67360b7b78682defbe7b00efc2b2ee950a8ff60fba6135ce1e5acb0babee7852c417c41fbe48ca8d", @typed={0x4, 0x78}, @typed={0x4, 0x45}, @generic="a2e16c408e8212f4dec2905afb51a17efe83dc537b572e758b09b41797651f5a739e9e2465e0ade06ee821f0f35a93ea3323fe0031561c20536fec8c6d77cdfdffd5cea08c366410719bfab0c493345bb4dc0b6fdff93e0cd06912b4348ce9579d0a8099919a07f2a5643ba17ee543038c6740773d3b89a14d4ca59443572bf773ee0870427cfcb8b84d9228fcf0fe0c02a4f9a37c9a3e"]}, @generic="1b0b48c6368c6ebdefd81d872c53e5791d26b58df3373c06fcaea3a3146ae9699df0942becc1ece445612220a89e3fcb097d2d45c08d993247ab0f098ece02272e05cceeb7b69cbb5a75dc1ecf6ca4f3ebc707615a944906a4c8d5244438717b54c62356a966df9e0572310fabda63d5b913c99ef90a7f14c3a5831ec2d55b1ae702845cf17bbd311df4bbcd97877b4950", @nested={0x254, 0x74, [@generic="f14c7538446866e2f71e3b92572e51df417d57b24cfa0b0f19c291f2b78920dba9cf1767617e94b9a142a51dea74391f82ec9e0a260a8ea2bdcce4cae863254462084cf616ef9d8cba2cbdd40f296a3e4bd3d4131ee9f9ab4118171afbe4be74295816afd46b7da7cb2390f4", @generic="ff0467cbfecbd39db76342b44bdb114e3330dbc20f59053c420ba288341c9cebb10f03e1fa30338eb796f3213ba1bab169250e67b8785a0c207e2c5a52064749b325ab6c7a89d189cf343b7062c8440d2cbb520249eca227e4b32593c6c0149087c9197ddf293e0169b53e075683ed80d692432eb67affaa7583e841b364ff1eb2980d087c0c135201361e67eb131698a3326ac2a2d7b9f97132e2e1dcd5442d437bfe2ed6720e00748487a749965fbc15f68d9de4accd92aef186031f75c97dff9e3a2913b803fc923d7d96217519eac52936043570466501415cf049ab9643942c83f84050aad9d1afb92cef2a2b", @typed={0x8, 0x6, @uid=r2}, @generic="2037bf68171bff8bb52b3bc1e3dc45e5e204f3976b7d40f59c08c8a94c1ac56fa63e39fdb59824525b2b02a59e6364b89d736ab6b73664a976670fc477d0d7ec45fb514540b7b541bf5ef88d23148de9f598f3a6d879b7d6e0d963eaafd4376ad47e7af16709120b16ffee4efb9f2a762b8bbfa29cc05bfc3b8c44a8ca9451bcf2cd20d9c613d56ac4caefbc9194430ae2823d961e31c903324e4278d6aab601197d9ebfcfc4512c1b75e01389f9d958423a1febb0a06683a6d812c2b42b873d379fd919853cad70aa7ebac45a7151ee0ca0650f7949a66ac2bbff1890d3ffb0e40235e0a2bc3ca9b78dd0efeb"]}, @generic="7c0b8b3b06ebac3c97fa00bb1102702d723b9ffe288b6b58d8c3687429", @generic="273fb9ac0722410a1958e807a6adc4a80a2666fbe46294309229c3f4672029eedae48a0dd1c9b70d4b066d1bbcb85e4976129dc2cd670bcf271e3232546cb201db4400b8113f8388de77c13b416ef09e3828c8ce68e7d3bd1222e50672e3f1d356858e7dd2613a459acd95e16f3740e52894b1cd0a5539b6085b0b71021d9b9905a6f2cb46409ca7f493fe2b2df35d88180f3d9099681e6c2b1601670b9d6bcb91a146b73cafee8f2e852b1f1ae07dc6d819cd631a661b662e1c5cfa04678f865ce937e6220249c1c3acb5d82c46846787b0d3cfd11b20606333ede2fa6da844de287d33"]}, 0x668}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)

07:55:23 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:23 executing program 0:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x4000, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000040)='selinux\x00', 0xffffffffffffffff}, 0x30)
write$P9_RGETLOCK(r0, &(0x7f0000000100)={0x1e, 0x37, 0x1, {0x1, 0xb951, 0x3, r1}}, 0x1e)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000140)=0xffffffffffffff9c, 0x4)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000150001000000000000002000ff0100000000000000000000000000000000008f58000000000000000000000000005a529f6300000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xb8}}, 0x0)

[ 2946.774127] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0)
07:55:23 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:23 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x98\xbe\x05\x00', 0x1132})

[ 2946.863746] FAT-fs (loop1): Filesystem has been set read-only
[ 2946.933425] FAT-fs (loop1): error, invalid access to FAT (entry 0x00007400)
[ 2946.942095] FAT-fs (loop2): error, invalid access to FAT (entry 0x00007400)
[ 2946.960773] FAT-fs (loop2): Filesystem has been set read-only
[ 2947.022212] FAT-fs (loop1): error, invalid access to FAT (entry 0x00007400)
07:55:24 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:24 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x50a, 0x4000)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f00000000c0)={{0xa, 0x5, 0x101, 0x6, 'syz1\x00', 0x81}, 0x4, 0x0, 0xffffffff, 0x0, 0x3, 0x1c, 'syz1\x00', &(0x7f0000000040)=['ppp1\x00', ':bdev\x00', 'lo.user*\x00'], 0x14, [], [0x0, 0x7fff, 0x800000000000000, 0x4]})
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x10e, &(0x7f00000bfff0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000150001000000000000000000ff010000000000000000000000000001e0000a0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xb8}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

07:55:24 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0xf9, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

07:55:24 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:55:24 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',sm'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:55:24 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:24 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = getpgid(0xffffffffffffffff)
migrate_pages(r1, 0x3f9, &(0x7f0000000000), &(0x7f0000000040)=0xffff)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000150001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000322a18f7a03d5d2180f5a631cd6accda54c4c8a573c760c4d398ad1a4feb9df5ff997f458e7cf9"], 0xb8}}, 0x0)

[ 2947.337142] FAT-fs (loop5): bogus number of reserved sectors
[ 2947.398791] FAT-fs (loop5): Can't find a valid FAT filesystem
07:55:24 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x99\xbe\x05\x00', 0x1132})

07:55:24 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:24 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xb8}}, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x2, 0x80)
setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='trusted.overlay.opaque\x00', &(0x7f0000000480)='y\x00', 0x2, 0x2)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400802c}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r2, 0x8, 0x70bd25, 0x25dfdbfc, {{}, 0x0, 0x4108, 0x0, {0x14, 0x18, {0x5, @bearer=@l2={'eth', 0x3a, 'bcsh0\x00'}}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000801}, 0x1)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0x30c, 0x70bd26, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x24000040)

[ 2947.451891] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2947.477951] FAT-fs (loop2): Filesystem has been set read-only
[ 2947.536784] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2947.632619] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
07:55:24 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2947.674239] FAT-fs (loop2): error, invalid access to FAT (entry 0x00007400)
07:55:24 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x109, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

07:55:24 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x800000007ffe, 0x4000)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x2, 0x7fff}}, 0x28)
ioctl$UI_DEV_CREATE(r1, 0x5501)

07:55:24 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:24 executing program 0:
r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f00000000c0)="955bc5f2080abea6f0e77068c852b68c65bf13de39e6dc98f2e51c965255ef6690664dfc45300eae009b2220c45cbbd6db4e562372681419bded57d85a06e70631712435e1e7ef28ac2ff65593ed0e92a26d2e68928dde99da453174d1073f692b27932d3ba31c354e7ad41af810071aae3a5d730aa3ab134f5eecbb4cef4e6f930db16fca0e4ac9f214317b214bbd6100462952b9d480976d0289d250", &(0x7f0000000180)=""/46}, 0x18)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000200))
sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)

[ 2948.089924] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
07:55:25 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:55:25 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYBLOB=',sma'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:55:25 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:25 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = accept(r0, &(0x7f00000002c0)=@in={0x2, 0x0, @broadcast}, &(0x7f0000000340)=0x80)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00')
r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x64, 0x280000)
ioctl$DRM_IOCTL_ADD_BUFS(r3, 0xc0206416, &(0x7f0000000040)={0x9, 0x7fff, 0x5, 0x3, 0x8, 0x2})
sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x501}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r2, 0x821, 0x70bd27, 0x8, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80eb}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000005}, 0x8000)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)

[ 2948.148797] FAT-fs (loop2): Filesystem has been set read-only
[ 2948.207542] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
07:55:25 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x9a\xbe\x05\x00', 0x1132})

[ 2948.282491] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2948.307278] FAT-fs (loop5): bogus number of reserved sectors
[ 2948.321918] FAT-fs (loop2): error, invalid access to FAT (entry 0x00007400)
07:55:25 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:25 executing program 0:
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x80000, 0x0)
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040), 0x4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)

07:55:25 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x119, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

[ 2948.341663] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2948.451819] __nla_parse: 17 callbacks suppressed
[ 2948.451829] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
07:55:25 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:25 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8, 0x400)
ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000040)={0x2, 0x5, 0x100000001, 0xae8, 0xffffffffffffff01, 0x3})
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b80000001500fa000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xb8}}, 0x0)
ioctl$KDSETMODE(r0, 0x4b3a, 0x5)

07:55:25 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0)
write$FUSE_LSEEK(r1, &(0x7f0000000040)={0x18, 0x0, 0x3, {0xffff}}, 0x18)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)

[ 2948.796621] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
07:55:25 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2948.854942] FAT-fs (loop2): Filesystem has been set read-only
[ 2948.956541] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2948.977443] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2949.055901] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2949.086795] FAT-fs (loop2): error, invalid access to FAT (entry 0x00007400)
07:55:26 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:55:26 executing program 0:
syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x100000001, 0x2ef0891649f1c273)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f0000000000)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0x62}, 0x1, 0x0, 0x0, 0x1000000000}, 0x2000000)

07:55:26 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYBLOB=',sma'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:55:26 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:26 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x9b\xbe\x05\x00', 0x1132})

07:55:26 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x129, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

07:55:26 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vfio/vfio\x00', 0x2, 0x0)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r3, 0x100, 0x70bd28, 0x25dfdbff, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x20, @link='broadcast-link\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x84}, 0x40000)
r4 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x7, 0x0)
ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000000100))
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000040)={@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x5, r5})

07:55:26 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2949.364416] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2949.476921] FAT-fs (loop5): bogus number of reserved sectors
07:55:26 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2949.556908] FAT-fs (loop5): Can't find a valid FAT filesystem
07:55:26 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2949.675666] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
07:55:26 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x9c\xbe\x05\x00', 0x1132})

07:55:26 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x24000, 0x31)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={<r2=>0x0, 0xfffffffffffffffb}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={r2, 0x9}, &(0x7f0000000140)=0x8)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000180)=0x10000, 0x4)

[ 2949.937537] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2949.964515] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
07:55:26 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, 0x0, 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:55:26 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:27 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYBLOB=',sma'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:55:27 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x139, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

07:55:27 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000150001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}}, 0x0)
r1 = accept(r0, &(0x7f0000000000)=@l2, &(0x7f00000000c0)=0x80)
accept4(r0, &(0x7f0000000100)=@can={0x1d, <r2=>0x0}, &(0x7f0000000180)=0x80, 0x800)
setsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f00000001c0)={@ipv4={[], [], @local}, r2}, 0x14)

07:55:27 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2950.181845] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
07:55:27 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xb8}}, 0x0)

[ 2950.226854] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
07:55:27 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x9d\xbe\x05\x00', 0x1132})

07:55:27 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2950.494399] FAT-fs (loop5): bogus number of reserved sectors
07:55:27 executing program 0:
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
fsetxattr$trusted_overlay_origin(r0, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x1)
r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x9, 0x400400)
connect$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x2, 0x0, 0x9, 0x758, @link_local}, 0x10)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f0000000280))
write$FUSE_INIT(r1, &(0x7f0000000200)={0x50, 0xfffffffffffffff5, 0x5, {0x7, 0x1c, 0x10001, 0x40, 0x800, 0x40, 0x9a, 0xb5}}, 0x50)
ioctl$CAPI_MANUFACTURER_CMD(r1, 0xc0104320, &(0x7f00000001c0)={0x8001, &(0x7f0000000140)="21db284c27abf0c951e7ea77ea922b99fcd85af9554f05811492a0e56c0be80b486bdb1f927e01334d728da85a38c724e4e0faad3231b99f38beba8d076826345378977b2532ea19533732d4"})
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)

[ 2950.539187] FAT-fs (loop5): Can't find a valid FAT filesystem
07:55:27 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2950.648899] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2950.701687] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2950.739627] FAT-fs (loop2): error, invalid access to FAT (entry 0x00007400)
[ 2950.748722] FAT-fs (loop2): Filesystem has been set read-only
07:55:27 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x149, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

[ 2950.775402] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
07:55:27 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, 0x0, 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:55:27 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:28 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYBLOB])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:55:28 executing program 0:
socket$nl_xfrm(0x10, 0x3, 0x6)

07:55:28 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x9e\xbe\x05\x00', 0x1132})

07:55:28 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2951.153307] FAT-fs (loop5): bogus number of reserved sectors
[ 2951.172611] FAT-fs (loop5): Can't find a valid FAT filesystem
07:55:28 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000000)={0x7, 'syz0\x00'})
r2 = getpid()
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f00000000c0)={{0x4, 0x7, 0x8, 0x420, 'syz1\x00', 0x4}, 0x5, 0x4, 0x106, r2, 0x3, 0xff, 'syz0\x00', &(0x7f0000000040)=['trusted\x00', 'selinux\x7f\x00', 'syz0\x00'], 0x16, [], [0x2, 0x7ff, 0x6, 0xc270]})

07:55:28 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x159, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

07:55:28 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:28 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x1, 0x0, 0x0, 0x3}, 0x0)

07:55:28 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:28 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x9f\xbe\x05\x00', 0x1132})

07:55:28 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, 0x0, 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:55:28 executing program 0:
r0 = socket$inet(0x2, 0x1, 0x5000000000000)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000000)={0x400, 0x8000, 0x3}, 0xc)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)

07:55:29 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYBLOB])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:55:29 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:29 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x169, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

07:55:29 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xfffffffffffffd55}}, 0x1)

[ 2952.217339] FAT-fs (loop5): bogus number of reserved sectors
[ 2952.228988] FAT-fs (loop5): Can't find a valid FAT filesystem
07:55:29 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:29 executing program 0:
r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x8, 0x808000)
ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000040)={0x5, 0x4004})
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f0000000080))
mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/37)

07:55:29 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\xa0\xbe\x05\x00', 0x1132})

07:55:29 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:29 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x99, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

07:55:29 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x179, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

07:55:29 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, &(0x7f0000000140), 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:55:29 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2953.163456] FAT-fs (loop5): bogus number of reserved sectors
[ 2953.193199] FAT-fs (loop5): Can't find a valid FAT filesystem
07:55:30 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYBLOB])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:55:30 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x400000, 0x0)
ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f00000000c0)=""/161)

07:55:30 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x00\x00\x00\x01\x00', 0x1132})

07:55:30 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:30 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x189, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

07:55:30 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:30 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x39, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

07:55:30 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2953.677968] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2953.731777] FAT-fs (loop2): error, invalid access to FAT (entry 0x00007400)
[ 2953.757471] FAT-fs (loop1): Filesystem has been set read-only
[ 2953.769571] FAT-fs (loop1): error, invalid access to FAT (entry 0x00007400)
[ 2953.778206] FAT-fs (loop2): Filesystem has been set read-only
07:55:30 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',sma'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

[ 2953.807626] FAT-fs (loop1): error, invalid access to FAT (entry 0x00007400)
07:55:30 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x199, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

07:55:30 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, &(0x7f0000000140), 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:55:30 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:30 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:55:30 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x00\x00\x00\x02\x00', 0x1132})

07:55:31 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2954.194812] FAT-fs (loop5): bogus number of reserved sectors
[ 2954.225296] FAT-fs (loop5): Can't find a valid FAT filesystem
07:55:31 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:31 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:31 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x1a9, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

07:55:31 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x00\x00\x00\x03\x00', 0x1132})

07:55:31 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:31 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',sma'])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:55:31 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, &(0x7f0000000140), 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:55:31 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:31 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:55:32 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x1b9, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

[ 2955.241554] FAT-fs (loop5): bogus number of reserved sectors
[ 2955.251183] FAT-fs (loop5): Can't find a valid FAT filesystem
07:55:32 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x00\x00\x00\x04\x00', 0x1132})

07:55:32 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:32 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:32 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x7f\xbe\x05\x00', 0x1132})

07:55:32 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x1c9, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

07:55:32 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:55:32 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:33 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

[ 2956.217302] FAT-fs (loop5): bogus number of reserved sectors
[ 2956.251599] FAT-fs (loop5): Can't find a valid FAT filesystem
07:55:33 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:33 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x00\x00\x00\x05\x00', 0x1132})

[ 2956.344904] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2956.356392] FAT-fs (loop2): Filesystem has been set read-only
[ 2956.447930] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
07:55:33 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:55:33 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2956.538624] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2956.554005] FAT-fs (loop2): error, invalid access to FAT (entry 0x00007400)
07:55:33 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x1d9, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

07:55:33 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:33 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:33 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x00\x00\x00\x06\x00', 0x1132})

07:55:33 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:55:34 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:34 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x1e9, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

[ 2957.286232] FAT-fs (loop5): bogus number of reserved sectors
07:55:34 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000240))
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r2})
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

[ 2957.347732] FAT-fs (loop5): Can't find a valid FAT filesystem
07:55:34 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:34 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x00\x00\x00\a\x00', 0x1132})

07:55:34 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="97e2c612746d6f64653d303030301d3030303030323030303030303134303030302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYBLOB])
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r3})
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:55:34 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:34 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x600, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

07:55:34 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:35 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:55:35 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:35 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000240))
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r2})
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:55:35 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:35 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x900, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

[ 2958.411894] FAT-fs (loop5): bogus number of reserved sectors
[ 2958.443864] FAT-fs (loop5): Can't find a valid FAT filesystem
07:55:35 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x00\x00\x00\b\x00', 0x1132})

07:55:35 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:35 executing program 0:
r0 = socket$inet(0x2, 0x1, 0x0)
mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xffffffffffff7ffc, 0x8972, 0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f00000e5000)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r0, &(0x7f00009322c4)={0x2, 0x0, @remote}, 0x27)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)

07:55:35 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:35 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x901, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

07:55:36 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:36 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKZEROOUT(r0, 0x127f, 0x0)

07:55:36 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:55:36 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x00\x00\x00\n\x00', 0x1132})

07:55:36 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000240))
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r2})
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:55:36 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0xf, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:36 executing program 0:
unshare(0x20000000)
clone(0x0, &(0x7f0000000040), 0x0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

[ 2959.443054] FAT-fs (loop5): bogus number of reserved sectors
[ 2959.468846] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2959.530460] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2959.582978] FAT-fs (loop2): Filesystem has been set read-only
[ 2959.646229] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
07:55:36 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x14, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2959.741336] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2959.793176] FAT-fs (loop2): error, invalid access to FAT (entry 0x00007400)
07:55:36 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0xc00, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

07:55:36 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0xc0, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:36 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, <r2=>0xffffffffffffffff})
dup2(r0, r2)

07:55:36 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0xec0, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:36 executing program 0:
clone(0x80802102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x20000000b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xa8})
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840), 0xc)

07:55:37 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x00\x00\x00\f\x00', 0x1132})

[ 2960.227371] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
07:55:37 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:55:37 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x33fe0, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2960.308832] FAT-fs (loop2): Filesystem has been set read-only
[ 2960.407739] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
07:55:37 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000240))
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r2})
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:55:37 executing program 0:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x10000, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

07:55:37 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x2000001c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2960.567546] FAT-fs (loop5): bogus number of reserved sectors
[ 2960.589761] FAT-fs (loop2): error, invalid access to FAT (entry 0x00007400)
[ 2960.610780] FAT-fs (loop5): Can't find a valid FAT filesystem
07:55:37 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x7ffff000, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2960.671962] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
07:55:37 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0xf00, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

07:55:37 executing program 0:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x0, 0x0)
poll(&(0x7f00000000c0)=[{r0}, {}], 0x2, 0x6)

07:55:37 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x00\x00\x0f\x1b\x00', 0x1132})

[ 2960.774535] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0)
07:55:37 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0xfffffdef, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2960.841287] FAT-fs (loop1): Filesystem has been set read-only
[ 2960.890035] FAT-fs (loop1): error, invalid access to FAT (entry 0x00007400)
07:55:37 executing program 0:

[ 2960.978027] FAT-fs (loop1): error, invalid access to FAT (entry 0x00007400)
07:55:37 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0xf, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2961.216336] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2961.249015] FAT-fs (loop2): Filesystem has been set read-only
[ 2961.284892] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
07:55:38 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:55:38 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000240))
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r2})
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:55:38 executing program 0:

07:55:38 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x26, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2961.355346] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2961.377147] FAT-fs (loop2): error, invalid access to FAT (entry 0x00007400)
07:55:38 executing program 0:

[ 2961.424302] __nla_parse: 6 callbacks suppressed
[ 2961.424313] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
07:55:38 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x00\x00\x00\x1e\x00', 0x1132})

07:55:38 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x1200, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

[ 2961.539658] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0)
07:55:38 executing program 0:

07:55:38 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x2, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2961.590665] FAT-fs (loop1): Filesystem has been set read-only
[ 2961.634167] FAT-fs (loop5): bogus number of reserved sectors
[ 2961.723988] FAT-fs (loop1): error, invalid access to FAT (entry 0x00007400)
[ 2961.731740] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2961.767145] FAT-fs (loop1): error, invalid access to FAT (entry 0x00007400)
07:55:38 executing program 0:

07:55:38 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x8, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:38 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000240))
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r2})
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

[ 2962.007075] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2962.037360] FAT-fs (loop2): Filesystem has been set read-only
[ 2962.088223] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2962.174238] FAT-fs (loop2): error, invalid access to FAT (entry 0x00007400)
[ 2962.187980] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2962.277273] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0)
07:55:39 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:55:39 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x300, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:39 executing program 0:

07:55:39 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x1900, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

07:55:39 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x00\x00\x00\x1f\x00', 0x1132})

[ 2962.317961] FAT-fs (loop1): Filesystem has been set read-only
[ 2962.370590] FAT-fs (loop1): error, invalid access to FAT (entry 0x00007400)
07:55:39 executing program 0:

07:55:39 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0xffffff1f, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2962.428429] FAT-fs (loop1): error, invalid access to FAT (entry 0x00007400)
07:55:39 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000240))
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r2})
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:55:39 executing program 0:

07:55:39 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x2, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2962.590395] FAT-fs (loop5): bogus number of reserved sectors
[ 2962.693159] FAT-fs (loop5): Can't find a valid FAT filesystem
07:55:39 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x3, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:39 executing program 0:

07:55:40 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:55:40 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x1901, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

07:55:40 executing program 0:

07:55:40 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x00\x00\x00 \x00', 0x1132})

07:55:40 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x4, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:40 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000240))
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r2})
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:55:40 executing program 0:

07:55:40 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x5, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2963.416604] FAT-fs (loop5): bogus number of reserved sectors
[ 2963.477356] FAT-fs (loop5): Can't find a valid FAT filesystem
07:55:40 executing program 0:

07:55:40 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x6, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:40 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x2900, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

07:55:40 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x8, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:41 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x00\x00\x00.\x00', 0x1132})

07:55:41 executing program 0:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x0, 0x0)
poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0)

07:55:41 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x9, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:41 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000240))
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r2})
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:55:41 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:55:41 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0xa, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:41 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x8000)
r1 = syz_open_pts(r0, 0x0)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0)
ioctl$TCSETSW(r1, 0x5437, 0x0)

07:55:41 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x2901, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

[ 2964.347331] FAT-fs (loop5): bogus number of reserved sectors
[ 2964.371167] FAT-fs (loop5): Can't find a valid FAT filesystem
07:55:41 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0xb, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:41 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0xe, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:41 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x00\x00\x032\x00', 0x1132})

07:55:41 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x3900, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

07:55:41 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0xf, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:41 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, &(0x7f0000000240))
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r2})
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:55:41 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x10, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:42 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:55:42 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x00\x00\x00?\x00', 0x1132})

07:55:42 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x8000)
r1 = syz_open_pts(r0, 0x0)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0)
ioctl$TCSETSW(r1, 0x5437, 0x0)

07:55:42 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x11, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2965.417008] FAT-fs (loop5): invalid media value (0x00)
[ 2965.470926] FAT-fs (loop5): Can't find a valid FAT filesystem
07:55:42 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x3901, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

07:55:42 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x12, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:42 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x13, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:42 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x60, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:42 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, &(0x7f0000000240))
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r2})
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:55:42 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x00\x00\x00@\x00', 0x1132})

[ 2966.060935] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2966.091631] FAT-fs (loop2): Filesystem has been set read-only
07:55:43 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:55:43 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0xf0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2966.150445] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
07:55:43 executing program 0:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02020609100000000000004c9e0000000200130002000000000000000000000105000600200000000a00000000000000000500e50008070000001f000000000000032000000000000200010000000000000000020000000005000500000000000a00000000000000ff1700000000000000000000000000170000000000000000"], 0x80}}, 0x0)

[ 2966.263437] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2966.334945] FAT-fs (loop2): error, invalid access to FAT (entry 0x00007400)
[ 2966.424797] FAT-fs (loop5): invalid media value (0x00)
07:55:43 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x300, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:43 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x3f00, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

[ 2966.489696] FAT-fs (loop5): Can't find a valid FAT filesystem
07:55:43 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x500, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:43 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000340)='personality\x00}\x857G\x9d\xac\xf0\x10\x12\x18u\x15\xc7\xfdC\x1d\xeai\x89xxm\xaa\xc91\x80\x98\xa6N\x9d\a\xca,\xec\xb1{\",\xdd\x033\xbfm\xdb/S\xfd>\xcc\fUl7O{r\xd3\xcd78rme\xb1wPY\xf98o1[%\x97\xf2\xb8o\x1f\x1e?Z(\x01\xbe\x90&')
pread64(r0, 0x0, 0x0, 0x0)

[ 2966.830557] 
[ 2966.832232] ======================================================
[ 2966.838549] WARNING: possible circular locking dependency detected
[ 2966.844874] 5.0.0-rc8+ #88 Not tainted
[ 2966.848760] ------------------------------------------------------
[ 2966.855090] syz-executor.0/31273 is trying to acquire lock:
[ 2966.860808] 0000000006de7514 (&sig->cred_guard_mutex){+.+.}, at: lock_trace+0x4a/0xe0
[ 2966.868819] 
[ 2966.868819] but task is already holding lock:
[ 2966.874811] 00000000866589af (&p->lock){+.+.}, at: seq_read+0x71/0x1130
[ 2966.881610] 
[ 2966.881610] which lock already depends on the new lock.
[ 2966.881610] 
[ 2966.889942] 
[ 2966.889942] the existing dependency chain (in reverse order) is:
[ 2966.897574] 
[ 2966.897574] -> #3 (&p->lock){+.+.}:
[ 2966.902716]        __mutex_lock+0xf7/0x1310
[ 2966.907064]        mutex_lock_nested+0x16/0x20
[ 2966.911673]        seq_read+0x71/0x1130
[ 2966.915672]        kernfs_fop_read+0xed/0x560
[ 2966.920191]        do_iter_read+0x4a9/0x660
[ 2966.924538]        vfs_readv+0xf0/0x160
[ 2966.928534]        default_file_splice_read+0x475/0x890
[ 2966.933924]        do_splice_to+0x12a/0x190
[ 2966.938300]        splice_direct_to_actor+0x2d2/0x970
[ 2966.943525]        do_splice_direct+0x1da/0x2a0
[ 2966.948214]        do_sendfile+0x597/0xd00
[ 2966.952468]        __x64_sys_sendfile64+0x1dd/0x220
[ 2966.957502]        do_syscall_64+0x103/0x610
[ 2966.961932]        entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2966.967640] 
[ 2966.967640] -> #2 (sb_writers#3){.+.+}:
[ 2966.973119]        __sb_start_write+0x20b/0x360
[ 2966.977802]        mnt_want_write+0x3f/0xc0
[ 2966.982148]        ovl_want_write+0x76/0xa0
[ 2966.986484]        ovl_create_object+0xb3/0x2c0
[ 2966.991165]        ovl_create+0x28/0x30
[ 2966.995151]        lookup_open+0x12e0/0x1b10
[ 2966.999572]        path_openat+0x149a/0x4690
[ 2967.003994]        do_filp_open+0x1a1/0x280
[ 2967.008324]        do_sys_open+0x3fe/0x5d0
[ 2967.012573]        __x64_sys_open+0x7e/0xc0
[ 2967.016919]        do_syscall_64+0x103/0x610
[ 2967.021341]        entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2967.027066] 
[ 2967.027066] -> #1 (&ovl_i_mutex_dir_key[depth]){++++}:
[ 2967.033858]        down_read+0x3b/0x90
[ 2967.037760]        path_openat+0x1e79/0x4690
[ 2967.042181]        do_filp_open+0x1a1/0x280
[ 2967.046514]        do_open_execat+0x13b/0x6d0
[ 2967.051024]        __do_execve_file.isra.0+0x178d/0x23f0
[ 2967.056488]        __x64_sys_execve+0x8f/0xc0
[ 2967.060998]        do_syscall_64+0x103/0x610
[ 2967.065421]        entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2967.071160] 
[ 2967.071160] -> #0 (&sig->cred_guard_mutex){+.+.}:
[ 2967.077502]        lock_acquire+0x16f/0x3f0
[ 2967.081845]        __mutex_lock+0xf7/0x1310
[ 2967.086187]        mutex_lock_killable_nested+0x16/0x20
[ 2967.091564]        lock_trace+0x4a/0xe0
[ 2967.095553]        proc_pid_personality+0x1c/0xd0
[ 2967.100408]        proc_single_show+0xf6/0x180
[ 2967.105007]        seq_read+0x4db/0x1130
[ 2967.109082]        __vfs_read+0x116/0x8c0
[ 2967.113243]        vfs_read+0x194/0x3e0
[ 2967.117315]        ksys_pread64+0x183/0x1c0
[ 2967.121653]        __x64_sys_pread64+0x97/0xf0
[ 2967.126248]        do_syscall_64+0x103/0x610
[ 2967.130670]        entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2967.136383] 
[ 2967.136383] other info that might help us debug this:
[ 2967.136383] 
[ 2967.144528] Chain exists of:
[ 2967.144528]   &sig->cred_guard_mutex --> sb_writers#3 --> &p->lock
[ 2967.144528] 
[ 2967.155207]  Possible unsafe locking scenario:
[ 2967.155207] 
[ 2967.161270]        CPU0                    CPU1
[ 2967.165941]        ----                    ----
[ 2967.170610]   lock(&p->lock);
[ 2967.173720]                                lock(sb_writers#3);
[ 2967.179702]                                lock(&p->lock);
[ 2967.185333]   lock(&sig->cred_guard_mutex);
[ 2967.189667] 
[ 2967.189667]  *** DEADLOCK ***
[ 2967.189667] 
[ 2967.195733] 1 lock held by syz-executor.0/31273:
[ 2967.200489]  #0: 00000000866589af (&p->lock){+.+.}, at: seq_read+0x71/0x1130
[ 2967.207706] 
[ 2967.207706] stack backtrace:
[ 2967.212218] CPU: 1 PID: 31273 Comm: syz-executor.0 Not tainted 5.0.0-rc8+ #88
[ 2967.219496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2967.228866] Call Trace:
[ 2967.231472]  dump_stack+0x172/0x1f0
[ 2967.235117]  print_circular_bug.isra.0.cold+0x1cc/0x28f
[ 2967.240496]  __lock_acquire+0x2f00/0x4700
[ 2967.244660]  ? depot_save_stack+0x1de/0x460
[ 2967.248999]  ? mark_held_locks+0x100/0x100
[ 2967.253248]  ? depot_save_stack+0x1de/0x460
[ 2967.257586]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 2967.262270]  ? trace_hardirqs_on+0x67/0x230
[ 2967.266605]  ? kasan_check_read+0x11/0x20
[ 2967.270816]  ? __lock_is_held+0xb6/0x140
[ 2967.274909]  ? lock_trace+0x4a/0xe0
[ 2967.278550]  lock_acquire+0x16f/0x3f0
[ 2967.282372]  ? lock_trace+0x4a/0xe0
[ 2967.286015]  ? lock_trace+0x4a/0xe0
[ 2967.289685]  __mutex_lock+0xf7/0x1310
[ 2967.293501]  ? lock_trace+0x4a/0xe0
[ 2967.297139]  ? lock_trace+0x4a/0xe0
[ 2967.300780]  ? mutex_trylock+0x1e0/0x1e0
[ 2967.304854]  ? get_pid_task+0xd4/0x190
[ 2967.308756]  ? find_held_lock+0x35/0x130
[ 2967.312830]  ? get_pid_task+0xd4/0x190
[ 2967.316731]  ? __lock_is_held+0xb6/0x140
[ 2967.320809]  mutex_lock_killable_nested+0x16/0x20
[ 2967.325665]  ? mutex_lock_killable_nested+0x16/0x20
[ 2967.330695]  lock_trace+0x4a/0xe0
[ 2967.334164]  proc_pid_personality+0x1c/0xd0
[ 2967.338498]  proc_single_show+0xf6/0x180
[ 2967.342576]  seq_read+0x4db/0x1130
[ 2967.346135]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2967.351691]  __vfs_read+0x116/0x8c0
[ 2967.355333]  ? seq_dentry+0x2d0/0x2d0
[ 2967.359162]  ? vfs_copy_file_range+0xbb0/0xbb0
[ 2967.363760]  ? __fget+0x367/0x540
[ 2967.367231]  ? security_file_permission+0x94/0x320
[ 2967.372175]  ? rw_verify_area+0x118/0x360
[ 2967.376338]  vfs_read+0x194/0x3e0
[ 2967.379812]  ksys_pread64+0x183/0x1c0
[ 2967.383624]  ? __ia32_sys_write+0xb0/0xb0
[ 2967.387785]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 2967.392560]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 2967.397334]  ? do_syscall_64+0x26/0x610
[ 2967.401330]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2967.406713]  ? do_syscall_64+0x26/0x610
[ 2967.410701]  __x64_sys_pread64+0x97/0xf0
[ 2967.414781]  do_syscall_64+0x103/0x610
[ 2967.418682]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2967.423887] RIP: 0033:0x457e29
[ 2967.427268] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2967.446184] RSP: 002b:00007fcf5e6edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000011
[ 2967.453918] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29
[ 2967.461234] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 2967.468524] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 2967.475808] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcf5e6ee6d4
07:55:44 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x4000, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

07:55:44 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

[ 2967.483097] R13: 00000000004c492b R14: 00000000004d81f8 R15: 00000000ffffffff
[ 2967.523311] kobject: 'nr0
' (00000000d6c3386a): kobject_cleanup, parent           (null)
07:55:44 executing program 0:
perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
accept$inet6(r1, 0x0, 0x0)

07:55:44 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, &(0x7f0000000240))
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r2})
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:55:44 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x600, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:44 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1132})

[ 2967.532880] kobject: 'loop5' (00000000d63eeebe): kobject_uevent_env
[ 2967.544242] kobject: 'loop5' (00000000d63eeebe): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 2967.560275] kobject: 'nr0
' (00000000d6c3386a): calling ktype release
[ 2967.575197] kobject: 'nr0
': free name
[ 2967.611093] kobject: 'loop2' (000000005bad3e05): kobject_uevent_env
[ 2967.617560] kobject: 'loop2' (000000005bad3e05): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 2967.632629] kobject: 'loop0' (000000008d6f63cc): kobject_uevent_env
[ 2967.639103] kobject: 'loop0' (000000008d6f63cc): fill_kobj_path: path = '/devices/virtual/block/loop0'
[ 2967.663516] kobject: 'loop5' (00000000d63eeebe): kobject_uevent_env
[ 2967.687844] kobject: 'loop4' (00000000fa0b49b7): kobject_uevent_env
[ 2967.699169] kobject: 'loop4' (00000000fa0b49b7): fill_kobj_path: path = '/devices/virtual/block/loop4'
07:55:44 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x900, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2967.699266] kobject: 'loop5' (00000000d63eeebe): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 2967.734568] kobject: 'loop3' (000000006be0d120): kobject_uevent_env
[ 2967.741877] kobject: 'loop3' (000000006be0d120): fill_kobj_path: path = '/devices/virtual/block/loop3'
[ 2967.772076] kobject: 'loop1' (00000000d7c669ef): kobject_uevent_env
07:55:44 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x300, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2967.778565] kobject: 'loop1' (00000000d7c669ef): fill_kobj_path: path = '/devices/virtual/block/loop1'
[ 2967.789197] kobject: 'nr0
' (00000000593e3a41): kobject_add_internal: parent: 'net', set: 'devices'
[ 2967.807201] kobject: 'loop2' (000000005bad3e05): kobject_uevent_env
[ 2967.817642] kobject: 'nr0
' (00000000593e3a41): kobject_uevent_env
[ 2967.825086] kobject: 'loop2' (000000005bad3e05): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 2967.835042] kobject: 'nr0
' (00000000593e3a41): fill_kobj_path: path = '/devices/virtual/net/nr0
'
[ 2967.868251] FAT-fs (loop5): invalid media value (0x00)
[ 2967.895782] kobject: 'queues' (000000003f90475c): kobject_add_internal: parent: 'nr0
', set: '<NULL>'
[ 2967.913224] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2967.931710] kobject: 'loop1' (00000000d7c669ef): kobject_uevent_env
07:55:44 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000240))
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r2})
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:55:44 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0xa00, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2967.945923] FAT-fs (loop2): error, invalid access to FAT (entry 0x00007400)
[ 2967.949540] kobject: 'queues' (000000003f90475c): kobject_uevent_env
[ 2967.955432] kobject: 'loop1' (00000000d7c669ef): fill_kobj_path: path = '/devices/virtual/block/loop1'
[ 2967.970197] FAT-fs (loop2): Filesystem has been set read-only
[ 2967.983932] kobject: 'queues' (000000003f90475c): kobject_uevent_env: filter function caused the event to drop!
[ 2967.997076] kobject: 'rx-0' (00000000ea5980c3): kobject_add_internal: parent: 'queues', set: 'queues'
[ 2968.019538] kobject: 'loop0' (000000008d6f63cc): kobject_uevent_env
[ 2968.030622] kobject: 'loop0' (000000008d6f63cc): fill_kobj_path: path = '/devices/virtual/block/loop0'
[ 2968.046401] kobject: 'rx-0' (00000000ea5980c3): kobject_uevent_env
[ 2968.051086] kobject: 'loop5' (00000000d63eeebe): kobject_uevent_env
[ 2968.059651] kobject: 'loop5' (00000000d63eeebe): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 2968.072434] kobject: 'loop4' (00000000fa0b49b7): kobject_uevent_env
[ 2968.074703] kobject: 'rx-0' (00000000ea5980c3): fill_kobj_path: path = '/devices/virtual/net/nr0
/queues/rx-0'
[ 2968.091421] kobject: 'loop4' (00000000fa0b49b7): fill_kobj_path: path = '/devices/virtual/block/loop4'
07:55:45 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0xb00, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2968.134836] kobject: 'loop0' (000000008d6f63cc): kobject_uevent_env
[ 2968.169180] kobject: 'loop0' (000000008d6f63cc): fill_kobj_path: path = '/devices/virtual/block/loop0'
[ 2968.180196] kobject: 'tx-0' (000000005025f737): kobject_add_internal: parent: 'queues', set: 'queues'
[ 2968.223312] kobject: 'loop4' (00000000fa0b49b7): kobject_uevent_env
[ 2968.233971] kobject: 'tx-0' (000000005025f737): kobject_uevent_env
[ 2968.259921] kobject: 'tx-0' (000000005025f737): fill_kobj_path: path = '/devices/virtual/net/nr0
/queues/tx-0'
07:55:45 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0xe00, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2968.278111] kobject: 'loop4' (00000000fa0b49b7): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 2968.332739] kobject: 'batman_adv' (000000009f701f7f): kobject_add_internal: parent: 'nr0
', set: '<NULL>'
07:55:45 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x4900, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

07:55:45 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:55:45 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0xf00, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2968.403367] kobject: 'batman_adv' (000000009f701f7f): kobject_uevent_env
[ 2968.433665] kobject: 'batman_adv' (000000009f701f7f): kobject_uevent_env: filter function caused the event to drop!
[ 2968.492585] kobject: 'loop2' (000000005bad3e05): kobject_uevent_env
[ 2968.493328] kobject: 'batman_adv' (000000009f701f7f): kobject_cleanup, parent           (null)
[ 2968.501362] kobject: 'loop2' (000000005bad3e05): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 2968.521505] kobject: 'batman_adv' (000000009f701f7f): calling ktype release
[ 2968.554687] kobject: (000000009f701f7f): dynamic_kobj_release
[ 2968.585958] kobject: 'loop5' (00000000d63eeebe): kobject_uevent_env
[ 2968.597100] kobject: 'loop5' (00000000d63eeebe): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 2968.603806] kobject: 'batman_adv': free name
[ 2968.624483] kobject: 'rx-0' (00000000ea5980c3): kobject_cleanup, parent 000000003f90475c
[ 2968.643223] kobject: 'loop4' (00000000fa0b49b7): kobject_uevent_env
[ 2968.654442] kobject: 'loop5' (00000000d63eeebe): kobject_uevent_env
[ 2968.663715] kobject: 'rx-0' (00000000ea5980c3): auto cleanup 'remove' event
[ 2968.670325] kobject: 'loop5' (00000000d63eeebe): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 2968.680473] kobject: 'loop4' (00000000fa0b49b7): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 2968.693533] kobject: 'rx-0' (00000000ea5980c3): kobject_uevent_env
[ 2968.700001] kobject: 'rx-0' (00000000ea5980c3): fill_kobj_path: path = '/devices/virtual/net/nr0
/queues/rx-0'
[ 2968.713908] kobject: 'rx-0' (00000000ea5980c3): auto cleanup kobject_del
[ 2968.727084] kobject: 'rx-0' (00000000ea5980c3): calling ktype release
[ 2968.744649] kobject: 'loop2' (000000005bad3e05): kobject_uevent_env
[ 2968.761835] kobject: 'rx-0': free name
[ 2968.765875] kobject: 'tx-0' (000000005025f737): kobject_cleanup, parent 000000003f90475c
[ 2968.778854] kobject: 'loop2' (000000005bad3e05): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 2968.780335] kobject: 'tx-0' (000000005025f737): auto cleanup 'remove' event
07:55:45 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x1100, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:45 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r2})
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

[ 2968.806615] kobject: 'tx-0' (000000005025f737): kobject_uevent_env
[ 2968.817577] kobject: 'tx-0' (000000005025f737): fill_kobj_path: path = '/devices/virtual/net/nr0
/queues/tx-0'
[ 2968.848037] FAT-fs (loop5): invalid media value (0x00)
[ 2968.871194] kobject: 'tx-0' (000000005025f737): auto cleanup kobject_del
[ 2968.881482] kobject: 'loop1' (00000000d7c669ef): kobject_uevent_env
[ 2968.887978] kobject: 'loop1' (00000000d7c669ef): fill_kobj_path: path = '/devices/virtual/block/loop1'
[ 2968.894984] kobject: 'tx-0' (000000005025f737): calling ktype release
[ 2968.910140] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2968.913244] kobject: 'tx-0': free name
[ 2968.925915] kobject: 'queues' (000000003f90475c): kobject_cleanup, parent           (null)
[ 2968.938412] kobject: 'queues' (000000003f90475c): calling ktype release
[ 2968.986137] kobject: 'queues' (000000003f90475c): kset_release
[ 2968.994007] kobject: 'queues': free name
[ 2968.998632] kobject: 'nr0
' (00000000593e3a41): kobject_uevent_env
[ 2969.006680] kobject: 'nr0
' (00000000593e3a41): fill_kobj_path: path = '/devices/virtual/net/nr0
'
[ 2969.018714] kobject: 'loop5' (00000000d63eeebe): kobject_uevent_env
[ 2969.030478] kobject: 'nr0
' (0000000054785c14): kobject_add_internal: parent: 'net', set: 'devices'
[ 2969.043198] kobject: 'loop5' (00000000d63eeebe): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 2969.063816] kobject: 'nr0
' (0000000054785c14): kobject_uevent_env
[ 2969.070533] kobject: 'nr0
' (0000000054785c14): fill_kobj_path: path = '/devices/virtual/net/nr0
'
[ 2969.081906] kobject: 'queues' (000000004d98c92f): kobject_add_internal: parent: 'nr0
', set: '<NULL>'
[ 2969.091940] kobject: 'queues' (000000004d98c92f): kobject_uevent_env
[ 2969.098859] kobject: 'queues' (000000004d98c92f): kobject_uevent_env: filter function caused the event to drop!
[ 2969.118767] kobject: 'loop1' (00000000d7c669ef): kobject_uevent_env
[ 2969.125672] kobject: 'rx-0' (000000004f90e5f2): kobject_add_internal: parent: 'queues', set: 'queues'
[ 2969.135873] kobject: 'loop1' (00000000d7c669ef): fill_kobj_path: path = '/devices/virtual/block/loop1'
[ 2969.158774] kobject: 'rx-0' (000000004f90e5f2): kobject_uevent_env
[ 2969.174381] kobject: 'rx-0' (000000004f90e5f2): fill_kobj_path: path = '/devices/virtual/net/nr0
/queues/rx-0'
[ 2969.187766] kobject: 'loop0' (000000008d6f63cc): kobject_uevent_env
[ 2969.212270] kobject: 'loop0' (000000008d6f63cc): fill_kobj_path: path = '/devices/virtual/block/loop0'
[ 2969.246653] kobject: 'tx-0' (00000000afc2fb6e): kobject_add_internal: parent: 'queues', set: 'queues'
[ 2969.272533] kobject: 'tx-0' (00000000afc2fb6e): kobject_uevent_env
[ 2969.279225] kobject: 'tx-0' (00000000afc2fb6e): fill_kobj_path: path = '/devices/virtual/net/nr0
/queues/tx-0'
[ 2969.323689] kobject: 'batman_adv' (0000000057c9d469): kobject_add_internal: parent: 'nr0
', set: '<NULL>'
[ 2969.353493] kobject: 'nr0
' (00000000593e3a41): kobject_cleanup, parent           (null)
[ 2969.366499] kobject: 'loop2' (000000005bad3e05): kobject_uevent_env
[ 2969.386448] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2969.397045] kobject: 'nr0
' (00000000593e3a41): calling ktype release
[ 2969.397107] kobject: 'loop2' (000000005bad3e05): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 2969.421128] FAT-fs (loop2): Filesystem has been set read-only
[ 2969.423748] FAT-fs (loop2): error, invalid access to FAT (entry 0x00007400)
[ 2969.437272] kobject: 'loop5' (00000000d63eeebe): kobject_uevent_env
[ 2969.451196] kobject: 'loop5' (00000000d63eeebe): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 2969.463086] kobject: 'nr0
': free name
[ 2969.494618] kobject: 'batman_adv' (0000000057c9d469): kobject_uevent_env
[ 2969.502368] kobject: 'batman_adv' (0000000057c9d469): kobject_uevent_env: filter function caused the event to drop!
[ 2969.518258] kobject: 'batman_adv' (0000000057c9d469): kobject_cleanup, parent           (null)
[ 2969.527400] kobject: 'batman_adv' (0000000057c9d469): calling ktype release
[ 2969.538227] kobject: 'loop2' (000000005bad3e05): kobject_uevent_env
[ 2969.547714] kobject: (0000000057c9d469): dynamic_kobj_release
[ 2969.556343] kobject: 'loop2' (000000005bad3e05): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 2969.566394] kobject: 'batman_adv': free name
[ 2969.584815] kobject: 'rx-0' (000000004f90e5f2): kobject_cleanup, parent 000000004d98c92f
[ 2969.605811] kobject: 'rx-0' (000000004f90e5f2): auto cleanup 'remove' event
[ 2969.616213] kobject: 'rx-0' (000000004f90e5f2): kobject_uevent_env
[ 2969.625864] kobject: 'rx-0' (000000004f90e5f2): fill_kobj_path: path = '/devices/virtual/net/nr0
/queues/rx-0'
[ 2969.638997] kobject: 'rx-0' (000000004f90e5f2): auto cleanup kobject_del
[ 2969.646249] kobject: 'rx-0' (000000004f90e5f2): calling ktype release
[ 2969.655668] kobject: 'rx-0': free name
[ 2969.659698] kobject: 'tx-0' (00000000afc2fb6e): kobject_cleanup, parent 000000004d98c92f
[ 2969.668280] kobject: 'tx-0' (00000000afc2fb6e): auto cleanup 'remove' event
[ 2969.678167] kobject: 'tx-0' (00000000afc2fb6e): kobject_uevent_env
[ 2969.684951] kobject: 'tx-0' (00000000afc2fb6e): fill_kobj_path: path = '/devices/virtual/net/nr0
/queues/tx-0'
[ 2969.698016] kobject: 'tx-0' (00000000afc2fb6e): auto cleanup kobject_del
[ 2969.705239] kobject: 'tx-0' (00000000afc2fb6e): calling ktype release
[ 2969.714512] kobject: 'tx-0': free name
[ 2969.718508] kobject: 'queues' (000000004d98c92f): kobject_cleanup, parent           (null)
[ 2969.727312] kobject: 'queues' (000000004d98c92f): calling ktype release
[ 2969.736787] kobject: 'queues' (000000004d98c92f): kset_release
[ 2969.743111] kobject: 'queues': free name
[ 2969.747607] kobject: 'nr0
' (0000000054785c14): kobject_uevent_env
[ 2969.756693] kobject: 'nr0
' (0000000054785c14): fill_kobj_path: path = '/devices/virtual/net/nr0
'
07:55:46 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, &(0x7f0000000240))
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r2})
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:55:46 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x1200, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:46 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x00\x00\x00L\x00', 0x1132})

07:55:46 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:55:46 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x4901, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

07:55:46 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r2})
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

[ 2969.801176] kobject: 'nr0
' (0000000054785c14): kobject_cleanup, parent           (null)
[ 2969.809498] kobject: 'nr0
' (0000000054785c14): calling ktype release
[ 2969.816212] kobject: 'nr0
': free name
[ 2969.821410] kobject: 'loop1' (00000000d7c669ef): kobject_uevent_env
[ 2969.828127] kobject: 'loop1' (00000000d7c669ef): fill_kobj_path: path = '/devices/virtual/block/loop1'
07:55:46 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x1300, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2969.866817] kobject: 'loop3' (000000006be0d120): kobject_uevent_env
[ 2969.875755] kobject: 'loop3' (000000006be0d120): fill_kobj_path: path = '/devices/virtual/block/loop3'
[ 2969.885497] kobject: 'loop5' (00000000d63eeebe): kobject_uevent_env
[ 2969.902407] kobject: 'nr0
' (00000000475ee631): kobject_add_internal: parent: 'net', set: 'devices'
[ 2969.912312] kobject: 'loop5' (00000000d63eeebe): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 2969.947048] kobject: 'nr0
' (00000000475ee631): kobject_uevent_env
[ 2969.961983] kobject: 'nr0
' (00000000475ee631): fill_kobj_path: path = '/devices/virtual/net/nr0
'
[ 2969.972138] kobject: 'loop0' (000000008d6f63cc): kobject_uevent_env
[ 2969.982263] kobject: 'queues' (00000000fa32c764): kobject_add_internal: parent: 'nr0
', set: '<NULL>'
[ 2969.986594] kobject: 'loop0' (000000008d6f63cc): fill_kobj_path: path = '/devices/virtual/block/loop0'
[ 2970.005889] kobject: 'loop2' (000000005bad3e05): kobject_uevent_env
[ 2970.016917] kobject: 'queues' (00000000fa32c764): kobject_uevent_env
[ 2970.028070] kobject: 'loop2' (000000005bad3e05): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 2970.048405] kobject: 'queues' (00000000fa32c764): kobject_uevent_env: filter function caused the event to drop!
[ 2970.070437] kobject: 'rx-0' (00000000388961f1): kobject_add_internal: parent: 'queues', set: 'queues'
[ 2970.101944] kobject: 'loop4' (00000000fa0b49b7): kobject_uevent_env
[ 2970.128931] kobject: 'loop4' (00000000fa0b49b7): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 2970.129150] kobject: 'rx-0' (00000000388961f1): kobject_uevent_env
[ 2970.149619] FAT-fs (loop5): invalid media value (0x00)
[ 2970.156806] kobject: 'loop1' (00000000d7c669ef): kobject_uevent_env
[ 2970.170333] kobject: 'loop1' (00000000d7c669ef): fill_kobj_path: path = '/devices/virtual/block/loop1'
[ 2970.184326] FAT-fs (loop5): Can't find a valid FAT filesystem
07:55:47 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x17da, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2970.208854] kobject: 'rx-0' (00000000388961f1): fill_kobj_path: path = '/devices/virtual/net/nr0
/queues/rx-0'
[ 2970.236659] kobject: 'tx-0' (00000000fec398aa): kobject_add_internal: parent: 'queues', set: 'queues'
[ 2970.263714] kobject: 'loop5' (00000000d63eeebe): kobject_uevent_env
[ 2970.280978] kobject: 'tx-0' (00000000fec398aa): kobject_uevent_env
[ 2970.296600] kobject: 'loop5' (00000000d63eeebe): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 2970.310183] kobject: 'tx-0' (00000000fec398aa): fill_kobj_path: path = '/devices/virtual/net/nr0
/queues/tx-0'
[ 2970.355301] kobject: 'batman_adv' (00000000bef318c5): kobject_add_internal: parent: 'nr0
', set: '<NULL>'
07:55:47 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x5900, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

07:55:47 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x6000, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2970.451767] kobject: 'batman_adv' (00000000bef318c5): kobject_uevent_env
[ 2970.491195] kobject: 'loop2' (000000005bad3e05): kobject_uevent_env
[ 2970.492958] kobject: 'batman_adv' (00000000bef318c5): kobject_uevent_env: filter function caused the event to drop!
[ 2970.502303] kobject: 'loop2' (000000005bad3e05): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 2970.557581] kobject: 'loop4' (00000000fa0b49b7): kobject_uevent_env
[ 2970.586949] kobject: 'loop4' (00000000fa0b49b7): fill_kobj_path: path = '/devices/virtual/block/loop4'
07:55:47 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0xda17, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2970.654160] kobject: 'batman_adv' (00000000bef318c5): kobject_cleanup, parent           (null)
[ 2970.689164] kobject: 'batman_adv' (00000000bef318c5): calling ktype release
[ 2970.698361] kobject: 'loop2' (000000005bad3e05): kobject_uevent_env
[ 2970.715629] kobject: 'loop2' (000000005bad3e05): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 2970.726920] kobject: (00000000bef318c5): dynamic_kobj_release
[ 2970.740687] kobject: 'batman_adv': free name
07:55:47 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0xf000, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2970.754701] kobject: 'loop5' (00000000d63eeebe): kobject_uevent_env
[ 2970.780084] kobject: 'loop5' (00000000d63eeebe): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 2970.792618] kobject: 'rx-0' (00000000388961f1): kobject_cleanup, parent 00000000fa32c764
07:55:47 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, &(0x7f0000000240))
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r2})
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:55:47 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

[ 2970.827890] kobject: 'rx-0' (00000000388961f1): auto cleanup 'remove' event
[ 2970.840930] kobject: 'loop4' (00000000fa0b49b7): kobject_uevent_env
[ 2970.873284] kobject: 'loop4' (00000000fa0b49b7): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 2970.888611] kobject: 'rx-0' (00000000388961f1): kobject_uevent_env
[ 2970.895405] kobject: 'rx-0' (00000000388961f1): fill_kobj_path: path = '/devices/virtual/net/nr0
/queues/rx-0'
[ 2970.913421] kobject: 'loop0' (000000008d6f63cc): kobject_uevent_env
[ 2970.920027] kobject: 'loop5' (00000000d63eeebe): kobject_uevent_env
[ 2970.937174] kobject: 'loop0' (000000008d6f63cc): fill_kobj_path: path = '/devices/virtual/block/loop0'
[ 2970.950296] kobject: 'rx-0' (00000000388961f1): auto cleanup kobject_del
[ 2970.959951] kobject: 'loop5' (00000000d63eeebe): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 2970.975788] kobject: 'loop0' (000000008d6f63cc): kobject_uevent_env
[ 2970.982547] kobject: 'rx-0' (00000000388961f1): calling ktype release
[ 2970.992285] kobject: 'rx-0': free name
[ 2970.995782] kobject: 'loop0' (000000008d6f63cc): fill_kobj_path: path = '/devices/virtual/block/loop0'
[ 2971.000903] kobject: 'tx-0' (00000000fec398aa): kobject_cleanup, parent 00000000fa32c764
[ 2971.045705] kobject: 'tx-0' (00000000fec398aa): auto cleanup 'remove' event
[ 2971.061104] kobject: 'loop1' (00000000d7c669ef): kobject_uevent_env
[ 2971.068751] kobject: 'loop1' (00000000d7c669ef): fill_kobj_path: path = '/devices/virtual/block/loop1'
[ 2971.082264] kobject: 'tx-0' (00000000fec398aa): kobject_uevent_env
[ 2971.098346] kobject: 'tx-0' (00000000fec398aa): fill_kobj_path: path = '/devices/virtual/net/nr0
/queues/tx-0'
[ 2971.122696] FAT-fs (loop5): invalid media value (0x00)
[ 2971.137935] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2971.146719] kobject: 'tx-0' (00000000fec398aa): auto cleanup kobject_del
[ 2971.161123] kobject: 'tx-0' (00000000fec398aa): calling ktype release
[ 2971.175687] kobject: 'tx-0': free name
[ 2971.184164] kobject: 'queues' (00000000fa32c764): kobject_cleanup, parent           (null)
[ 2971.202668] kobject: 'queues' (00000000fa32c764): calling ktype release
[ 2971.217323] kobject: 'queues' (00000000fa32c764): kset_release
[ 2971.224866] kobject: 'loop5' (00000000d63eeebe): kobject_uevent_env
[ 2971.231441] kobject: 'queues': free name
[ 2971.237881] kobject: 'loop5' (00000000d63eeebe): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 2971.248170] kobject: 'nr0
' (00000000475ee631): kobject_uevent_env
[ 2971.254879] kobject: 'nr0
' (00000000475ee631): fill_kobj_path: path = '/devices/virtual/net/nr0
'
[ 2971.274758] kobject: 'nr0
' (000000001a3c8eaf): kobject_add_internal: parent: 'net', set: 'devices'
[ 2971.298521] kobject: 'nr0
' (000000001a3c8eaf): kobject_uevent_env
[ 2971.324701] kobject: 'nr0
' (000000001a3c8eaf): fill_kobj_path: path = '/devices/virtual/net/nr0
'
[ 2971.345165] kobject: 'queues' (00000000ab93d714): kobject_add_internal: parent: 'nr0
', set: '<NULL>'
[ 2971.365846] kobject: 'queues' (00000000ab93d714): kobject_uevent_env
[ 2971.380235] kobject: 'queues' (00000000ab93d714): kobject_uevent_env: filter function caused the event to drop!
[ 2971.402960] kobject: 'rx-0' (00000000f9c1d799): kobject_add_internal: parent: 'queues', set: 'queues'
[ 2971.423591] kobject: 'rx-0' (00000000f9c1d799): kobject_uevent_env
[ 2971.425941] kobject: 'loop2' (000000005bad3e05): kobject_uevent_env
[ 2971.444430] kobject: 'rx-0' (00000000f9c1d799): fill_kobj_path: path = '/devices/virtual/net/nr0
/queues/rx-0'
[ 2971.451462] kobject: 'loop2' (000000005bad3e05): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 2971.483119] kobject: 'tx-0' (00000000959b48b9): kobject_add_internal: parent: 'queues', set: 'queues'
[ 2971.493086] kobject: 'tx-0' (00000000959b48b9): kobject_uevent_env
[ 2971.499589] kobject: 'tx-0' (00000000959b48b9): fill_kobj_path: path = '/devices/virtual/net/nr0
/queues/tx-0'
[ 2971.510893] kobject: 'batman_adv' (00000000c37ed105): kobject_add_internal: parent: 'nr0
', set: '<NULL>'
[ 2971.523332] kobject: 'nr0
' (00000000475ee631): kobject_cleanup, parent           (null)
[ 2971.553200] kobject: 'nr0
' (00000000475ee631): calling ktype release
[ 2971.561772] kobject: 'nr0
': free name
[ 2971.567609] kobject: 'batman_adv' (00000000c37ed105): kobject_uevent_env
[ 2971.597659] kobject: 'batman_adv' (00000000c37ed105): kobject_uevent_env: filter function caused the event to drop!
[ 2971.604170] kobject: 'loop2' (000000005bad3e05): kobject_uevent_env
[ 2971.619559] kobject: 'loop2' (000000005bad3e05): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 2971.657908] kobject: 'batman_adv' (00000000c37ed105): kobject_cleanup, parent           (null)
[ 2971.666931] kobject: 'batman_adv' (00000000c37ed105): calling ktype release
[ 2971.674327] kobject: (00000000c37ed105): dynamic_kobj_release
[ 2971.680332] kobject: 'batman_adv': free name
[ 2971.685096] kobject: 'rx-0' (00000000f9c1d799): kobject_cleanup, parent 00000000ab93d714
[ 2971.693522] kobject: 'rx-0' (00000000f9c1d799): auto cleanup 'remove' event
[ 2971.703509] kobject: 'rx-0' (00000000f9c1d799): kobject_uevent_env
[ 2971.715523] kobject: 'loop5' (00000000d63eeebe): kobject_uevent_env
[ 2971.723206] kobject: 'rx-0' (00000000f9c1d799): fill_kobj_path: path = '/devices/virtual/net/nr0
/queues/rx-0'
[ 2971.732954] kobject: 'loop5' (00000000d63eeebe): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 2971.733560] kobject: 'rx-0' (00000000f9c1d799): auto cleanup kobject_del
[ 2971.750183] kobject: 'rx-0' (00000000f9c1d799): calling ktype release
[ 2971.757007] kobject: 'rx-0': free name
[ 2971.763888] kobject: 'tx-0' (00000000959b48b9): kobject_cleanup, parent 00000000ab93d714
[ 2971.773113] kobject: 'tx-0' (00000000959b48b9): auto cleanup 'remove' event
[ 2971.780590] kobject: 'loop0' (000000008d6f63cc): kobject_uevent_env
[ 2971.785328] kobject: 'tx-0' (00000000959b48b9): kobject_uevent_env
[ 2971.788668] kobject: 'loop0' (000000008d6f63cc): fill_kobj_path: path = '/devices/virtual/block/loop0'
[ 2971.793482] kobject: 'tx-0' (00000000959b48b9): fill_kobj_path: path = '/devices/virtual/net/nr0
/queues/tx-0'
[ 2971.813743] kobject: 'tx-0' (00000000959b48b9): auto cleanup kobject_del
[ 2971.820617] kobject: 'tx-0' (00000000959b48b9): calling ktype release
[ 2971.827267] kobject: 'tx-0': free name
[ 2971.831217] kobject: 'queues' (00000000ab93d714): kobject_cleanup, parent           (null)
[ 2971.839639] kobject: 'queues' (00000000ab93d714): calling ktype release
[ 2971.846425] kobject: 'queues' (00000000ab93d714): kset_release
[ 2971.852446] kobject: 'queues': free name
[ 2971.856747] kobject: 'nr0
' (000000001a3c8eaf): kobject_uevent_env
[ 2971.863145] kobject: 'nr0
' (000000001a3c8eaf): fill_kobj_path: path = '/devices/virtual/net/nr0
'
07:55:48 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x00\x05\xbe\\\x00', 0x1132})

07:55:48 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0xf0ffff, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:48 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r2})
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:55:48 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x5901, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

07:55:48 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:55:48 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

[ 2971.921180] kobject: 'nr0
' (000000001a3c8eaf): kobject_cleanup, parent           (null)
[ 2971.929496] kobject: 'nr0
' (000000001a3c8eaf): calling ktype release
[ 2971.936162] kobject: 'nr0
': free name
[ 2971.950464] kobject: 'loop3' (000000006be0d120): kobject_uevent_env
07:55:48 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x1000000, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2971.976450] kobject: 'loop3' (000000006be0d120): fill_kobj_path: path = '/devices/virtual/block/loop3'
[ 2971.988074] kobject: 'loop2' (000000005bad3e05): kobject_uevent_env
[ 2971.999335] kobject: 'loop2' (000000005bad3e05): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 2972.007060] kobject: 'loop0' (000000008d6f63cc): kobject_uevent_env
[ 2972.029332] kobject: 'loop5' (00000000d63eeebe): kobject_uevent_env
[ 2972.031126] kobject: 'nr0
' (00000000fe2a824a): kobject_add_internal: parent: 'net', set: 'devices'
[ 2972.038416] kobject: 'loop5' (00000000d63eeebe): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 2972.050108] kobject: 'loop0' (000000008d6f63cc): fill_kobj_path: path = '/devices/virtual/block/loop0'
[ 2972.121358] kobject: 'nr0
' (00000000fe2a824a): kobject_uevent_env
[ 2972.141521] kobject: 'nr0
' (00000000fe2a824a): fill_kobj_path: path = '/devices/virtual/net/nr0
'
[ 2972.157960] kobject: 'loop1' (00000000d7c669ef): kobject_uevent_env
[ 2972.184693] kobject: 'queues' (000000002e936921): kobject_add_internal: parent: 'nr0
', set: '<NULL>'
[ 2972.191397] kobject: 'loop1' (00000000d7c669ef): fill_kobj_path: path = '/devices/virtual/block/loop1'
[ 2972.218434] kobject: 'queues' (000000002e936921): kobject_uevent_env
[ 2972.243678] kobject: 'queues' (000000002e936921): kobject_uevent_env: filter function caused the event to drop!
[ 2972.273774] kobject: 'loop4' (00000000fa0b49b7): kobject_uevent_env
[ 2972.284945] kobject: 'loop4' (00000000fa0b49b7): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 2972.308605] kobject: 'rx-0' (00000000b21f6461): kobject_add_internal: parent: 'queues', set: 'queues'
[ 2972.346741] FAT-fs (loop5): invalid media value (0x00)
07:55:49 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x2000000, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2972.367706] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2972.369140] kobject: 'rx-0' (00000000b21f6461): kobject_uevent_env
[ 2972.402654] kobject: 'rx-0' (00000000b21f6461): fill_kobj_path: path = '/devices/virtual/net/nr0
/queues/rx-0'
[ 2972.425403] kobject: 'loop4' (00000000fa0b49b7): kobject_uevent_env
[ 2972.435368] kobject: 'loop4' (00000000fa0b49b7): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 2972.462754] kobject: 'tx-0' (0000000002b8ac0f): kobject_add_internal: parent: 'queues', set: 'queues'
07:55:49 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x3000000, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2972.474476] kobject: 'loop5' (00000000d63eeebe): kobject_uevent_env
[ 2972.492521] kobject: 'loop5' (00000000d63eeebe): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 2972.512100] kobject: 'tx-0' (0000000002b8ac0f): kobject_uevent_env
07:55:49 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x4000000, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2972.544746] kobject: 'tx-0' (0000000002b8ac0f): fill_kobj_path: path = '/devices/virtual/net/nr0
/queues/tx-0'
[ 2972.598113] kobject: 'loop4' (00000000fa0b49b7): kobject_uevent_env
[ 2972.609690] kobject: 'loop4' (00000000fa0b49b7): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 2972.618868] kobject: 'batman_adv' (0000000065b59ade): kobject_add_internal: parent: 'nr0
', set: '<NULL>'
07:55:49 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x6900, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

07:55:49 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x5000000, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2972.688864] kobject: 'batman_adv' (0000000065b59ade): kobject_uevent_env
[ 2972.731122] kobject: 'batman_adv' (0000000065b59ade): kobject_uevent_env: filter function caused the event to drop!
[ 2972.754111] kobject: 'loop2' (000000005bad3e05): kobject_uevent_env
[ 2972.761830] kobject: 'batman_adv' (0000000065b59ade): kobject_cleanup, parent           (null)
[ 2972.762912] kobject: 'loop2' (000000005bad3e05): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 2972.795012] kobject: 'batman_adv' (0000000065b59ade): calling ktype release
[ 2972.821889] kobject: (0000000065b59ade): dynamic_kobj_release
[ 2972.827904] kobject: 'batman_adv': free name
[ 2972.832692] kobject: 'rx-0' (00000000b21f6461): kobject_cleanup, parent 000000002e936921
[ 2972.841017] kobject: 'rx-0' (00000000b21f6461): auto cleanup 'remove' event
[ 2972.848140] kobject: 'rx-0' (00000000b21f6461): kobject_uevent_env
[ 2972.854870] kobject: 'loop1' (00000000d7c669ef): kobject_uevent_env
[ 2972.854902] kobject: 'loop1' (00000000d7c669ef): fill_kobj_path: path = '/devices/virtual/block/loop1'
[ 2972.861378] kobject: 'rx-0' (00000000b21f6461): fill_kobj_path: path = '/devices/virtual/net/nr0
/queues/rx-0'
[ 2972.861443] kobject: 'rx-0' (00000000b21f6461): auto cleanup kobject_del
[ 2972.891335] kobject: 'loop4' (00000000fa0b49b7): kobject_uevent_env
[ 2972.896897] kobject: 'rx-0' (00000000b21f6461): calling ktype release
[ 2972.897795] kobject: 'loop4' (00000000fa0b49b7): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 2972.904484] kobject: 'rx-0': free name
[ 2972.904536] kobject: 'tx-0' (0000000002b8ac0f): kobject_cleanup, parent 000000002e936921
[ 2972.904547] kobject: 'tx-0' (0000000002b8ac0f): auto cleanup 'remove' event
[ 2972.938337] kobject: 'tx-0' (0000000002b8ac0f): kobject_uevent_env
[ 2972.946368] kobject: 'tx-0' (0000000002b8ac0f): fill_kobj_path: path = '/devices/virtual/net/nr0
/queues/tx-0'
[ 2972.952480] kobject: 'loop5' (00000000d63eeebe): kobject_uevent_env
[ 2972.957791] kobject: 'tx-0' (0000000002b8ac0f): auto cleanup kobject_del
[ 2972.965792] kobject: 'loop5' (00000000d63eeebe): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 2972.971152] kobject: 'tx-0' (0000000002b8ac0f): calling ktype release
[ 2972.981774] kobject: 'loop0' (000000008d6f63cc): kobject_uevent_env
[ 2972.999577] kobject: 'loop0' (000000008d6f63cc): fill_kobj_path: path = '/devices/virtual/block/loop0'
[ 2973.001122] kobject: 'loop2' (000000005bad3e05): kobject_uevent_env
[ 2973.009275] kobject: 'tx-0': free name
[ 2973.018025] kobject: 'loop2' (000000005bad3e05): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 2973.030859] kobject: 'queues' (000000002e936921): kobject_cleanup, parent           (null)
[ 2973.039688] kobject: 'queues' (000000002e936921): calling ktype release
[ 2973.050666] kobject: 'loop2' (000000005bad3e05): kobject_uevent_env
[ 2973.054523] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2973.057504] kobject: 'queues' (000000002e936921): kset_release
[ 2973.071561] kobject: 'loop2' (000000005bad3e05): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 2973.077634] FAT-fs (loop2): Filesystem has been set read-only
[ 2973.085567] kobject: 'queues': free name
[ 2973.092887] kobject: 'nr0
' (00000000fe2a824a): kobject_uevent_env
[ 2973.099521] kobject: 'nr0
' (00000000fe2a824a): fill_kobj_path: path = '/devices/virtual/net/nr0
'
[ 2973.118146] kobject: 'nr0
' (0000000052067e0d): kobject_add_internal: parent: 'net', set: 'devices'
[ 2973.128522] kobject: 'nr0
' (0000000052067e0d): kobject_uevent_env
[ 2973.135128] kobject: 'nr0
' (0000000052067e0d): fill_kobj_path: path = '/devices/virtual/net/nr0
'
[ 2973.144579] kobject: 'queues' (00000000afaab870): kobject_add_internal: parent: 'nr0
', set: '<NULL>'
[ 2973.154182] kobject: 'queues' (00000000afaab870): kobject_uevent_env
[ 2973.160713] kobject: 'queues' (00000000afaab870): kobject_uevent_env: filter function caused the event to drop!
[ 2973.171035] kobject: 'rx-0' (000000006fc64dab): kobject_add_internal: parent: 'queues', set: 'queues'
[ 2973.180472] kobject: 'rx-0' (000000006fc64dab): kobject_uevent_env
[ 2973.186909] kobject: 'rx-0' (000000006fc64dab): fill_kobj_path: path = '/devices/virtual/net/nr0
/queues/rx-0'
[ 2973.197184] kobject: 'tx-0' (00000000e33a2e13): kobject_add_internal: parent: 'queues', set: 'queues'
[ 2973.206698] kobject: 'tx-0' (00000000e33a2e13): kobject_uevent_env
[ 2973.213092] kobject: 'tx-0' (00000000e33a2e13): fill_kobj_path: path = '/devices/virtual/net/nr0
/queues/tx-0'
[ 2973.223888] kobject: 'batman_adv' (00000000b3c729ea): kobject_add_internal: parent: 'nr0
', set: '<NULL>'
[ 2973.234063] kobject: 'nr0
' (00000000fe2a824a): kobject_cleanup, parent           (null)
[ 2973.240007] kobject: 'loop2' (000000005bad3e05): kobject_uevent_env
[ 2973.242366] kobject: 'nr0
' (00000000fe2a824a): calling ktype release
[ 2973.252137] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2973.255457] kobject: 'nr0
': free name
[ 2973.263506] kobject: 'loop2' (000000005bad3e05): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 2973.277700] kobject: 'batman_adv' (00000000b3c729ea): kobject_uevent_env
[ 2973.284624] kobject: 'batman_adv' (00000000b3c729ea): kobject_uevent_env: filter function caused the event to drop!
[ 2973.296088] kobject: 'batman_adv' (00000000b3c729ea): kobject_cleanup, parent           (null)
[ 2973.303787] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2973.304935] kobject: 'batman_adv' (00000000b3c729ea): calling ktype release
[ 2973.304952] kobject: (00000000b3c729ea): dynamic_kobj_release
[ 2973.326058] FAT-fs (loop2): error, invalid access to FAT (entry 0x00007400)
[ 2973.326063] kobject: 'batman_adv': free name
[ 2973.337897] kobject: 'rx-0' (000000006fc64dab): kobject_cleanup, parent 00000000afaab870
[ 2973.346577] kobject: 'rx-0' (000000006fc64dab): auto cleanup 'remove' event
[ 2973.356560] kobject: 'rx-0' (000000006fc64dab): kobject_uevent_env
[ 2973.363270] kobject: 'rx-0' (000000006fc64dab): fill_kobj_path: path = '/devices/virtual/net/nr0
/queues/rx-0'
[ 2973.374164] kobject: 'rx-0' (000000006fc64dab): auto cleanup kobject_del
[ 2973.381499] kobject: 'rx-0' (000000006fc64dab): calling ktype release
[ 2973.388084] kobject: 'rx-0': free name
[ 2973.392218] kobject: 'tx-0' (00000000e33a2e13): kobject_cleanup, parent 00000000afaab870
[ 2973.400451] kobject: 'tx-0' (00000000e33a2e13): auto cleanup 'remove' event
[ 2973.407945] kobject: 'tx-0' (00000000e33a2e13): kobject_uevent_env
[ 2973.411173] kobject: 'loop2' (000000005bad3e05): kobject_uevent_env
[ 2973.414360] kobject: 'tx-0' (00000000e33a2e13): fill_kobj_path: path = '/devices/virtual/net/nr0
/queues/tx-0'
[ 2973.423705] kobject: 'loop2' (000000005bad3e05): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 2973.431030] kobject: 'tx-0' (00000000e33a2e13): auto cleanup kobject_del
[ 2973.447301] kobject: 'tx-0' (00000000e33a2e13): calling ktype release
[ 2973.447349] kobject: 'loop2' (000000005bad3e05): kobject_uevent_env
[ 2973.453932] kobject: 'tx-0': free name
[ 2973.453963] kobject: 'queues' (00000000afaab870): kobject_cleanup, parent           (null)
[ 2973.453970] kobject: 'queues' (00000000afaab870): calling ktype release
[ 2973.453977] kobject: 'queues' (00000000afaab870): kset_release
[ 2973.453985] kobject: 'queues': free name
[ 2973.454324] kobject: 'nr0
' (0000000052067e0d): kobject_uevent_env
[ 2973.467389] kobject: 'loop2' (000000005bad3e05): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 2973.473594] kobject: 'nr0
' (0000000052067e0d): fill_kobj_path: path = '/devices/virtual/net/nr0
'
07:55:50 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x00\x05\xbe]\x00', 0x1132})

07:55:50 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000240))
fchdir(0xffffffffffffffff)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r2})
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:55:50 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:55:50 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r2})
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:55:50 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x6000000, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:50 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x6901, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

[ 2973.551512] kobject: 'nr0
' (0000000052067e0d): kobject_cleanup, parent           (null)
[ 2973.559786] kobject: 'nr0
' (0000000052067e0d): calling ktype release
[ 2973.567341] kobject: 'nr0
': free name
[ 2973.607655] kobject: 'loop3' (000000006be0d120): kobject_uevent_env
[ 2973.616665] kobject: 'loop3' (000000006be0d120): fill_kobj_path: path = '/devices/virtual/block/loop3'
[ 2973.629015] kobject: 'loop5' (00000000d63eeebe): kobject_uevent_env
[ 2973.637689] kobject: 'nr0
' (00000000ffaaf415): kobject_add_internal: parent: 'net', set: 'devices'
[ 2973.640472] kobject: 'loop5' (00000000d63eeebe): fill_kobj_path: path = '/devices/virtual/block/loop5'
07:55:50 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x8000000, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2973.667460] kobject: 'nr0
' (00000000ffaaf415): kobject_uevent_env
[ 2973.687065] kobject: 'nr0
' (00000000ffaaf415): fill_kobj_path: path = '/devices/virtual/net/nr0
'
[ 2973.710509] kobject: 'queues' (00000000f943696c): kobject_add_internal: parent: 'nr0
', set: '<NULL>'
[ 2973.729953] kobject: 'queues' (00000000f943696c): kobject_uevent_env
[ 2973.746116] kobject: 'queues' (00000000f943696c): kobject_uevent_env: filter function caused the event to drop!
[ 2973.765527] kobject: 'rx-0' (00000000043f31d5): kobject_add_internal: parent: 'queues', set: 'queues'
[ 2973.793059] kobject: 'rx-0' (00000000043f31d5): kobject_uevent_env
[ 2973.803436] kobject: 'loop2' (000000005bad3e05): kobject_uevent_env
[ 2973.809925] kobject: 'loop2' (000000005bad3e05): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 2973.810039] kobject: 'rx-0' (00000000043f31d5): fill_kobj_path: path = '/devices/virtual/net/nr0
/queues/rx-0'
[ 2973.841922] kobject: 'tx-0' (000000006b399dcd): kobject_add_internal: parent: 'queues', set: 'queues'
[ 2973.863646] kobject: 'loop0' (000000008d6f63cc): kobject_uevent_env
[ 2973.870202] kobject: 'loop0' (000000008d6f63cc): fill_kobj_path: path = '/devices/virtual/block/loop0'
[ 2973.882704] kobject: 'tx-0' (000000006b399dcd): kobject_uevent_env
[ 2973.892719] kobject: 'loop1' (00000000d7c669ef): kobject_uevent_env
[ 2973.899659] kobject: 'tx-0' (000000006b399dcd): fill_kobj_path: path = '/devices/virtual/net/nr0
/queues/tx-0'
[ 2973.934659] kobject: 'loop1' (00000000d7c669ef): fill_kobj_path: path = '/devices/virtual/block/loop1'
[ 2973.938319] kobject: 'batman_adv' (00000000c46489f4): kobject_add_internal: parent: 'nr0
', set: '<NULL>'
[ 2973.985020] kobject: 'batman_adv' (00000000c46489f4): kobject_uevent_env
[ 2973.997775] kobject: 'batman_adv' (00000000c46489f4): kobject_uevent_env: filter function caused the event to drop!
[ 2974.020256] kobject: 'batman_adv' (00000000c46489f4): kobject_cleanup, parent           (null)
[ 2974.046991] kobject: 'loop4' (00000000fa0b49b7): kobject_uevent_env
[ 2974.082944] kobject: 'loop4' (00000000fa0b49b7): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 2974.103013] FAT-fs (loop5): invalid media value (0x00)
[ 2974.114429] kobject: 'batman_adv' (00000000c46489f4): calling ktype release
[ 2974.133285] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2974.140402] kobject: (00000000c46489f4): dynamic_kobj_release
07:55:51 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x9000000, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2974.148345] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2974.164964] kobject: 'batman_adv': free name
[ 2974.194659] kobject: 'rx-0' (00000000043f31d5): kobject_cleanup, parent 00000000f943696c
[ 2974.216488] kobject: 'rx-0' (00000000043f31d5): auto cleanup 'remove' event
[ 2974.216720] FAT-fs (loop2): error, invalid access to FAT (entry 0x00007400)
[ 2974.241084] FAT-fs (loop2): Filesystem has been set read-only
[ 2974.259663] kobject: 'rx-0' (00000000043f31d5): kobject_uevent_env
[ 2974.275036] kobject: 'loop5' (00000000d63eeebe): kobject_uevent_env
07:55:51 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0xa000000, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2974.304190] kobject: 'rx-0' (00000000043f31d5): fill_kobj_path: path = '/devices/virtual/net/nr0
/queues/rx-0'
[ 2974.328976] kobject: 'loop5' (00000000d63eeebe): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 2974.351648] kobject: 'rx-0' (00000000043f31d5): auto cleanup kobject_del
[ 2974.360296] kobject: 'loop5' (00000000d63eeebe): kobject_uevent_env
[ 2974.370303] kobject: 'loop5' (00000000d63eeebe): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 2974.399289] kobject: 'rx-0' (00000000043f31d5): calling ktype release
[ 2974.418750] kobject: 'loop4' (00000000fa0b49b7): kobject_uevent_env
[ 2974.431069] kobject: 'rx-0': free name
[ 2974.433312] kobject: 'loop4' (00000000fa0b49b7): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 2974.437036] kobject: 'tx-0' (000000006b399dcd): kobject_cleanup, parent 00000000f943696c
07:55:51 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000240))
fchdir(0xffffffffffffffff)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r2})
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:55:51 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0xb000000, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:51 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x8000000, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2974.496775] kobject: 'tx-0' (000000006b399dcd): auto cleanup 'remove' event
[ 2974.504410] kobject: 'loop0' (000000008d6f63cc): kobject_uevent_env
[ 2974.510899] kobject: 'loop0' (000000008d6f63cc): fill_kobj_path: path = '/devices/virtual/block/loop0'
[ 2974.516691] kobject: 'tx-0' (000000006b399dcd): kobject_uevent_env
[ 2974.535052] kobject: 'loop4' (00000000fa0b49b7): kobject_uevent_env
[ 2974.549532] kobject: 'loop4' (00000000fa0b49b7): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 2974.559657] kobject: 'tx-0' (000000006b399dcd): fill_kobj_path: path = '/devices/virtual/net/nr0
/queues/tx-0'
[ 2974.560516] kobject: 'loop5' (00000000d63eeebe): kobject_uevent_env
[ 2974.576927] kobject: 'loop5' (00000000d63eeebe): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 2974.581666] kobject: 'loop1' (00000000d7c669ef): kobject_uevent_env
[ 2974.598862] kobject: 'tx-0' (000000006b399dcd): auto cleanup kobject_del
[ 2974.606224] kobject: 'tx-0' (000000006b399dcd): calling ktype release
[ 2974.607725] kobject: 'loop1' (00000000d7c669ef): fill_kobj_path: path = '/devices/virtual/block/loop1'
[ 2974.615779] kobject: 'tx-0': free name
[ 2974.639156] kobject: 'queues' (00000000f943696c): kobject_cleanup, parent           (null)
[ 2974.649371] kobject: 'queues' (00000000f943696c): calling ktype release
[ 2974.655248] kobject: 'loop1' (00000000d7c669ef): kobject_uevent_env
[ 2974.657870] kobject: 'queues' (00000000f943696c): kset_release
[ 2974.665295] kobject: 'loop1' (00000000d7c669ef): fill_kobj_path: path = '/devices/virtual/block/loop1'
[ 2974.669023] kobject: 'queues': free name
[ 2974.684408] kobject: 'nr0
' (00000000ffaaf415): kobject_uevent_env
[ 2974.696438] kobject: 'nr0
' (00000000ffaaf415): fill_kobj_path: path = '/devices/virtual/net/nr0
'
[ 2974.720345] kobject: 'nr0
' (000000007cca98ec): kobject_add_internal: parent: 'net', set: 'devices'
[ 2974.749404] kobject: 'nr0
' (000000007cca98ec): kobject_uevent_env
[ 2974.756733] kobject: 'nr0
' (000000007cca98ec): fill_kobj_path: path = '/devices/virtual/net/nr0
'
[ 2974.767356] kobject: 'queues' (00000000bc8b7968): kobject_add_internal: parent: 'nr0
', set: '<NULL>'
[ 2974.778502] kobject: 'queues' (00000000bc8b7968): kobject_uevent_env
[ 2974.785688] kobject: 'queues' (00000000bc8b7968): kobject_uevent_env: filter function caused the event to drop!
[ 2974.796602] kobject: 'rx-0' (00000000136ecc96): kobject_add_internal: parent: 'queues', set: 'queues'
[ 2974.807991] kobject: 'rx-0' (00000000136ecc96): kobject_uevent_env
[ 2974.814858] kobject: 'rx-0' (00000000136ecc96): fill_kobj_path: path = '/devices/virtual/net/nr0
/queues/rx-0'
[ 2974.826749] kobject: 'tx-0' (00000000a8a4084b): kobject_add_internal: parent: 'queues', set: 'queues'
[ 2974.838733] kobject: 'tx-0' (00000000a8a4084b): kobject_uevent_env
[ 2974.846210] kobject: 'tx-0' (00000000a8a4084b): fill_kobj_path: path = '/devices/virtual/net/nr0
/queues/tx-0'
[ 2974.868086] kobject: 'batman_adv' (00000000bdf4e2a0): kobject_add_internal: parent: 'nr0
', set: '<NULL>'
[ 2974.891052] kobject: 'nr0
' (00000000ffaaf415): kobject_cleanup, parent           (null)
[ 2974.903728] kobject: 'nr0
' (00000000ffaaf415): calling ktype release
[ 2974.915345] kobject: 'nr0
': free name
[ 2974.924386] kobject: 'batman_adv' (00000000bdf4e2a0): kobject_uevent_env
[ 2974.931437] kobject: 'batman_adv' (00000000bdf4e2a0): kobject_uevent_env: filter function caused the event to drop!
[ 2974.944736] kobject: 'batman_adv' (00000000bdf4e2a0): kobject_cleanup, parent           (null)
[ 2974.953772] kobject: 'batman_adv' (00000000bdf4e2a0): calling ktype release
[ 2974.961599] kobject: 'loop2' (000000005bad3e05): kobject_uevent_env
[ 2974.963861] kobject: (00000000bdf4e2a0): dynamic_kobj_release
[ 2974.968086] kobject: 'loop2' (000000005bad3e05): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 2974.974196] kobject: 'batman_adv': free name
[ 2974.990840] kobject: 'rx-0' (00000000136ecc96): kobject_cleanup, parent 00000000bc8b7968
[ 2974.999374] kobject: 'rx-0' (00000000136ecc96): auto cleanup 'remove' event
[ 2975.009190] kobject: 'rx-0' (00000000136ecc96): kobject_uevent_env
[ 2975.016077] kobject: 'loop2' (000000005bad3e05): kobject_uevent_env
[ 2975.028266] kobject: 'loop2' (000000005bad3e05): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 2975.040171] kobject: 'rx-0' (00000000136ecc96): fill_kobj_path: path = '/devices/virtual/net/nr0
/queues/rx-0'
[ 2975.064010] kobject: 'rx-0' (00000000136ecc96): auto cleanup kobject_del
[ 2975.074670] kobject: 'rx-0' (00000000136ecc96): calling ktype release
[ 2975.093872] kobject: 'rx-0': free name
[ 2975.097965] kobject: 'tx-0' (00000000a8a4084b): kobject_cleanup, parent 00000000bc8b7968
[ 2975.106994] kobject: 'tx-0' (00000000a8a4084b): auto cleanup 'remove' event
[ 2975.116913] kobject: 'tx-0' (00000000a8a4084b): kobject_uevent_env
[ 2975.123512] kobject: 'tx-0' (00000000a8a4084b): fill_kobj_path: path = '/devices/virtual/net/nr0
/queues/tx-0'
[ 2975.136447] kobject: 'tx-0' (00000000a8a4084b): auto cleanup kobject_del
[ 2975.143616] kobject: 'tx-0' (00000000a8a4084b): calling ktype release
[ 2975.150335] kobject: 'tx-0': free name
[ 2975.156999] kobject: 'queues' (00000000bc8b7968): kobject_cleanup, parent           (null)
[ 2975.165669] kobject: 'queues' (00000000bc8b7968): calling ktype release
[ 2975.175280] kobject: 'queues' (00000000bc8b7968): kset_release
[ 2975.181492] kobject: 'queues': free name
[ 2975.186025] kobject: 'nr0
' (000000007cca98ec): kobject_uevent_env
[ 2975.195083] kobject: 'nr0
' (000000007cca98ec): fill_kobj_path: path = '/devices/virtual/net/nr0
'
07:55:52 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x00\x05\xbe^\x00', 0x1132})

07:55:52 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)

07:55:52 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0xe000000, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

07:55:52 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x00\x05\xbe\\\x00', 0x1132})

07:55:52 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @dev}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
mount$fuse(0x0, 0x0, &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000"], 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x7900, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

[ 2975.223598] kobject: 'nr0
' (000000007cca98ec): kobject_cleanup, parent           (null)
[ 2975.232055] kobject: 'nr0
' (000000007cca98ec): calling ktype release
[ 2975.238778] kobject: 'nr0
': free name
07:55:52 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0xf000000, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2975.297023] kobject: 'loop5' (00000000d63eeebe): kobject_uevent_env
[ 2975.312223] kobject: 'nr0
' (00000000c84c5e6a): kobject_add_internal: parent: 'net', set: 'devices'
[ 2975.321950] kobject: 'loop5' (00000000d63eeebe): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 2975.345164] kobject: 'nr0
' (00000000c84c5e6a): kobject_uevent_env
[ 2975.361352] FAT-fs (loop5): invalid media value (0x00)
[ 2975.361520] kobject: 'loop3' (000000006be0d120): kobject_uevent_env
[ 2975.366698] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2975.383449] kobject: 'loop2' (000000005bad3e05): kobject_uevent_env
[ 2975.389927] kobject: 'loop2' (000000005bad3e05): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 2975.401878] kobject: 'nr0
' (00000000c84c5e6a): fill_kobj_path: path = '/devices/virtual/net/nr0
'
[ 2975.414248] kobject: 'queues' (000000003f7b24ad): kobject_add_internal: parent: 'nr0
', set: '<NULL>'
[ 2975.426388] kobject: 'loop3' (000000006be0d120): fill_kobj_path: path = '/devices/virtual/block/loop3'
[ 2975.431393] kobject: 'queues' (000000003f7b24ad): kobject_uevent_env
07:55:52 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x10000000, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2975.464929] kobject: 'queues' (000000003f7b24ad): kobject_uevent_env: filter function caused the event to drop!
[ 2975.476401] kobject: 'loop4' (00000000fa0b49b7): kobject_uevent_env
[ 2975.495744] kobject: 'rx-0' (000000009292720b): kobject_add_internal: parent: 'queues', set: 'queues'
[ 2975.504207] kobject: 'loop4' (00000000fa0b49b7): fill_kobj_path: path = '/devices/virtual/block/loop4'
07:55:52 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c")
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={[], 0x22}}, 0x14)
chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0)
dup3(r0, r0, 0x80000)
mount$fuse(0x0, &(0x7f0000000480)='./control/file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x140000, &(0x7f0000000580)=ANY=[@ANYBLOB])
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000240))
fchdir(0xffffffffffffffff)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000b578003f48c4506c1aa6682760f1"], 0x1e)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x1)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000000500)='./bus\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r2})
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./control\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

[ 2975.528518] kobject: 'loop4' (00000000fa0b49b7): kobject_uevent_env
[ 2975.548969] kobject: 'rx-0' (000000009292720b): kobject_uevent_env
[ 2975.552299] kobject: 'loop4' (00000000fa0b49b7): fill_kobj_path: path = '/devices/virtual/block/loop4'
07:55:52 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x11000000, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2975.579009] kobject: 'rx-0' (000000009292720b): fill_kobj_path: path = '/devices/virtual/net/nr0
/queues/rx-0'
[ 2975.581102] kobject: 'loop5' (00000000d63eeebe): kobject_uevent_env
[ 2975.598881] kobject: 'loop5' (00000000d63eeebe): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 2975.610302] kobject: 'tx-0' (00000000db7418cd): kobject_add_internal: parent: 'queues', set: 'queues'
[ 2975.632061] kobject: 'tx-0' (00000000db7418cd): kobject_uevent_env
[ 2975.639250] kobject: 'tx-0' (00000000db7418cd): fill_kobj_path: path = '/devices/virtual/net/nr0
/queues/tx-0'
[ 2975.652816] kobject: 'loop1' (00000000d7c669ef): kobject_uevent_env
[ 2975.659292] kobject: 'loop1' (00000000d7c669ef): fill_kobj_path: path = '/devices/virtual/block/loop1'
07:55:52 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x12000000, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2975.694170] kobject: 'batman_adv' (0000000090e58f67): kobject_add_internal: parent: 'nr0
', set: '<NULL>'
[ 2975.770705] kobject: 'nr0
' (00000000533a8e3e): kobject_add_internal: parent: 'net', set: 'devices'
[ 2975.794612] kobject: 'loop2' (000000005bad3e05): kobject_uevent_env
[ 2975.804963] kobject: 'loop1' (00000000d7c669ef): kobject_uevent_env
[ 2975.810457] kobject: 'loop2' (000000005bad3e05): fill_kobj_path: path = '/devices/virtual/block/loop2'
07:55:52 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x13000000, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2975.823708] kobject: 'nr0
' (00000000533a8e3e): kobject_uevent_env
[ 2975.831215] kobject: 'loop1' (00000000d7c669ef): fill_kobj_path: path = '/devices/virtual/block/loop1'
[ 2975.837169] kobject: 'nr0
' (00000000533a8e3e): fill_kobj_path: path = '/devices/virtual/net/nr0
'
[ 2975.862793] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2975.886294] kobject: 'loop4' (00000000fa0b49b7): kobject_uevent_env
[ 2975.895188] kobject: 'loop4' (00000000fa0b49b7): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 2975.916069] audit: type=1800 audit(1551340552.751:149): pid=31559 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="loop2" ino=726 res=0
07:55:52 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x60000000, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0)

[ 2975.916216] FAT-fs (loop2): Filesystem has been set read-only
[ 2975.949920] kobject: 'queues' (0000000097cdc3af): kobject_add_internal: parent: 'nr0
', set: '<NULL>'
[ 2975.994792] kobject: 'queues' (0000000097cdc3af): kobject_uevent_env
[ 2976.013400] kobject: 'queues' (0000000097cdc3af): kobject_uevent_env: filter function caused the event to drop!
[ 2976.032643] kobject: 'rx-0' (000000001f03b960): kobject_add_internal: parent: 'queues', set: 'queues'
[ 2976.059321] kobject: 'rx-0' (000000001f03b960): kobject_uevent_env
[ 2976.073270] kobject: 'loop4' (00000000fa0b49b7): kobject_uevent_env
[ 2976.081493] kobject: 'rx-0' (000000001f03b960): fill_kobj_path: path = '/devices/virtual/net/nr0
/queues/rx-0'
[ 2976.083471] kobject: 'loop4' (00000000fa0b49b7): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 2976.103105] kobject: 'tx-0' (00000000b3fe5104): kobject_add_internal: parent: 'queues', set: 'queues'
[ 2976.124274] kobject: 'loop5' (00000000d63eeebe): kobject_uevent_env
[ 2976.136395] kobject: 'loop5' (00000000d63eeebe): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 2976.140876] kobject: 'tx-0' (00000000b3fe5104): kobject_uevent_env
[ 2976.169931] kobject: 'tx-0' (00000000b3fe5104): fill_kobj_path: path = '/devices/virtual/net/nr0
/queues/tx-0'
[ 2976.195397] kobject: 'batman_adv' (00000000c2ffb043): kobject_add_internal: parent: 'nr0
', set: '<NULL>'
[ 2976.216691] kobject: 'batman_adv' (0000000090e58f67): kobject_uevent_env
[ 2976.229717] FAT-fs (loop2): error, invalid access to FAT (entry 0x00007400)
[ 2976.234765] kobject: 'batman_adv' (0000000090e58f67): kobject_uevent_env: filter function caused the event to drop!
[ 2976.252944] kobject: 'batman_adv' (0000000090e58f67): kobject_cleanup, parent           (null)
[ 2976.261994] kobject: 'batman_adv' (0000000090e58f67): calling ktype release
[ 2976.269166] kobject: (0000000090e58f67): dynamic_kobj_release
[ 2976.275342] kobject: 'batman_adv': free name
[ 2976.280060] kobject: 'rx-0' (000000009292720b): kobject_cleanup, parent 000000003f7b24ad
[ 2976.288658] kobject: 'loop2' (000000005bad3e05): kobject_uevent_env
[ 2976.295163] kobject: 'rx-0' (000000009292720b): auto cleanup 'remove' event
[ 2976.302401] kobject: 'loop2' (000000005bad3e05): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 2976.312063] kobject: 'rx-0' (000000009292720b): kobject_uevent_env
[ 2976.322206] kobject: 'rx-0' (000000009292720b): fill_kobj_path: path = '/devices/virtual/net/nr0
/queues/rx-0'
[ 2976.333334] kobject: 'rx-0' (000000009292720b): auto cleanup kobject_del
[ 2976.340277] kobject: 'rx-0' (000000009292720b): calling ktype release
[ 2976.347021] kobject: 'rx-0': free name
[ 2976.351348] kobject: 'tx-0' (00000000db7418cd): kobject_cleanup, parent 000000003f7b24ad
[ 2976.364162] kobject: 'tx-0' (00000000db7418cd): auto cleanup 'remove' event
[ 2976.371396] kobject: 'tx-0' (00000000db7418cd): kobject_uevent_env
[ 2976.377812] kobject: 'tx-0' (00000000db7418cd): fill_kobj_path: path = '/devices/virtual/net/nr0
/queues/tx-0'
[ 2976.388165] kobject: 'tx-0' (00000000db7418cd): auto cleanup kobject_del
[ 2976.395148] kobject: 'tx-0' (00000000db7418cd): calling ktype release
[ 2976.402076] kobject: 'tx-0': free name
[ 2976.406047] kobject: 'queues' (000000003f7b24ad): kobject_cleanup, parent           (null)
[ 2976.414570] kobject: 'queues' (000000003f7b24ad): calling ktype release
[ 2976.421512] kobject: 'queues' (000000003f7b24ad): kset_release
[ 2976.427574] kobject: 'queues': free name
[ 2976.432139] kobject: 'nr0
' (00000000c84c5e6a): kobject_uevent_env
[ 2976.438584] kobject: 'nr0
' (00000000c84c5e6a): fill_kobj_path: path = '/devices/virtual/net/nr0
'
[ 2976.451031] kobject: 'batman_adv' (00000000c2ffb043): kobject_uevent_env
[ 2976.457946] kobject: 'batman_adv' (00000000c2ffb043): kobject_uevent_env: filter function caused the event to drop!
[ 2976.471551] kobject: 'batman_adv' (00000000c2ffb043): kobject_cleanup, parent           (null)
[ 2976.480498] kobject: 'batman_adv' (00000000c2ffb043): calling ktype release
[ 2976.489784] kobject: (00000000c2ffb043): dynamic_kobj_release
[ 2976.497241] kobject: 'batman_adv': free name
[ 2976.504058] kobject: 'rx-0' (000000001f03b960): kobject_cleanup, parent 0000000097cdc3af
[ 2976.514135] kobject: 'rx-0' (000000001f03b960): auto cleanup 'remove' event
[ 2976.523459] kobject: 'rx-0' (000000001f03b960): kobject_uevent_env
[ 2976.530142] kobject: 'rx-0' (000000001f03b960): fill_kobj_path: path = '/devices/virtual/net/nr0
/queues/rx-0'
[ 2976.543845] kobject: 'rx-0' (000000001f03b960): auto cleanup kobject_del
[ 2976.550905] kobject: 'rx-0' (000000001f03b960): calling ktype release
[ 2976.557978] kobject: 'rx-0': free name
[ 2976.564788] kobject: 'tx-0' (00000000b3fe5104): kobject_cleanup, parent 0000000097cdc3af
[ 2976.573487] kobject: 'tx-0' (00000000b3fe5104): auto cleanup 'remove' event
[ 2976.580760] kobject: 'tx-0' (00000000b3fe5104): kobject_uevent_env
[ 2976.590073] kobject: 'tx-0' (00000000b3fe5104): fill_kobj_path: path = '/devices/virtual/net/nr0
/queues/tx-0'
[ 2976.611169] kobject: 'tx-0' (00000000b3fe5104): auto cleanup kobject_del
[ 2976.618961] kobject: 'tx-0' (00000000b3fe5104): calling ktype release
[ 2976.626026] kobject: 'tx-0': free name
[ 2976.630560] kobject: 'queues' (0000000097cdc3af): kobject_cleanup, parent           (null)
[ 2976.639031] kobject: 'queues' (0000000097cdc3af): calling ktype release
[ 2976.645919] kobject: 'queues' (0000000097cdc3af): kset_release
[ 2976.651967] kobject: 'queues': free name
[ 2976.656345] kobject: 'nr0
' (00000000533a8e3e): kobject_uevent_env
[ 2976.662730] kobject: 'nr0
' (00000000533a8e3e): fill_kobj_path: path = '/devices/virtual/net/nr0
'
[ 2976.674092] kobject: 'nr0
' (0000000007fae3fa): kobject_add_internal: parent: 'net', set: 'devices'
[ 2976.686797] kobject: 'nr0
' (0000000007fae3fa): kobject_uevent_env
[ 2976.691318] kobject: 'loop1' (00000000d7c669ef): kobject_uevent_env
[ 2976.693581] kobject: 'nr0
' (0000000007fae3fa): fill_kobj_path: path = '/devices/virtual/net/nr0
'
[ 2976.700777] kobject: 'loop1' (00000000d7c669ef): fill_kobj_path: path = '/devices/virtual/block/loop1'
[ 2976.709964] kobject: 'queues' (00000000f1ce20ff): kobject_add_internal: parent: 'nr0
', set: '<NULL>'
[ 2976.725703] kobject: 'loop1' (00000000d7c669ef): kobject_uevent_env
[ 2976.728741] kobject: 'queues' (00000000f1ce20ff): kobject_uevent_env
[ 2976.741583] kobject: 'queues' (00000000f1ce20ff): kobject_uevent_env: filter function caused the event to drop!
[ 2976.751105] kobject: 'loop1' (00000000d7c669ef): fill_kobj_path: path = '/devices/virtual/block/loop1'
[ 2976.753305] kobject: 'rx-0' (000000006b9df119): kobject_add_internal: parent: 'queues', set: 'queues'
[ 2976.772420] kobject: 'rx-0' (000000006b9df119): kobject_uevent_env
[ 2976.790592] kobject: 'rx-0' (000000006b9df119): fill_kobj_path: path = '/devices/virtual/net/nr0
/queues/rx-0'
[ 2976.803125] kobject: 'tx-0' (00000000d4ecaaa3): kobject_add_internal: parent: 'queues', set: 'queues'
[ 2976.813463] kobject: 'tx-0' (00000000d4ecaaa3): kobject_uevent_env
[ 2976.819954] kobject: 'tx-0' (00000000d4ecaaa3): fill_kobj_path: path = '/devices/virtual/net/nr0
/queues/tx-0'
[ 2976.837683] kobject: 'batman_adv' (000000003d9cd0a1): kobject_add_internal: parent: 'nr0
', set: '<NULL>'
[ 2976.849257] kobject: 'nr0
' (00000000c84c5e6a): kobject_cleanup, parent           (null)
[ 2976.849407] kobject: 'nr0
' (00000000533a8e3e): kobject_cleanup, parent           (null)
[ 2976.857676] kobject: 'nr0
' (00000000c84c5e6a): calling ktype release