2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write$binfmt_elf64(r3, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x16d, 0x40}}, 0x40)

09:58:58 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

09:58:59 executing program 1:
r0 = memfd_create(&(0x7f0000001140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f0000001440)=ANY=[@ANYBLOB="4d000300000000000000000005007400000000000000280000000000d4e34ba67f6ebb451a22dec4c83108206691fb94c9f8933881ff43ba0c2b77d8689288e04d070051b7780c50a90d78c71bda27c729dd5e448ad12a1ebb51a42093eb3d7f77b6d4d2233bf6c9103846e8eefa555dce7d460be085c86d383a06a08a69dfc9f019f20b858e0261cd4ea312ba66db4ce4943c4b4d41c97ea071bed057e0b14c8287b2c940eb689162949f0e102d0000000001000000450000ee70bd1d46c796b1fea49f43bbcb124e302da39ffb6bc66b4393f19dda517d616b07cd24b1be985e5041ab7e256e2294e9aca2279ab5a706b091e519e084d604b1194133d0ab255e87155ac5974bfe84c17d231ace2d08000000e06dcdc65020d6df5043525305681a32b6f8ceca6427ddbfdcf430a5c6d6850f5d452885828b7b45c0e8fee4210a3488238ae82eaba75926a8255064373db488c92cce048684b1a440985cddebae7f43ed8c11cd091409a9dd6b7ade273792ef1271d048dc6d3580ea7af940cf9931e6b1d28570ccee2aa6833f755cdf35f76bbc488c7efee69e795a1f1fc4e56a0abb501421eb4662ee7cc30667eb109160de41f9ffffffffffffca5e97cc97899738914fe39bdf1eb344b23309a63b86d4fbfbff99fa39804d57cbfb5ab9a034f10c5c56afd4f9084d71c41c389f0b00a2ea2d5e6aa4af6e3c320cddb54c369d8667e3525b0a50255681174864d87d2033aaba4bfeae49fe4f6280727f6561f38a35bfabd52c2c89b238d4fdde47d9dc229498c1a0c1d7592ad273c5b5519ba391a411bee2754af5c325e0e0892224399700a09a22385e01f21a57d38220e0b508330376a24b22e184067eeeb3f5fbaa7b9900"/638], 0x1c)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x1f0, &(0x7f0000000000)=[{}]}, 0x10)

09:58:59 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x802, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000640)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

09:59:01 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffffb}]})
perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800200203804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)
getpgid(0xffffffffffffffff)

09:59:01 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

09:59:01 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x802, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000640)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

09:59:01 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$packet(0x11, 0x0, 0x300)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write$binfmt_elf64(r3, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x16d, 0x40}}, 0x40)

09:59:01 executing program 1:
r0 = memfd_create(&(0x7f0000001140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f0000001440)=ANY=[@ANYBLOB="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"/638], 0x1c)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x1f0, &(0x7f0000000000)=[{}]}, 0x10)

09:59:01 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

09:59:01 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x802, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0)
write$uinput_user_dev(r0, 0x0, 0x0)
ioctl$UI_DEV_CREATE(r0, 0x5501)

09:59:01 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$packet(0x11, 0x0, 0x300)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write$binfmt_elf64(r3, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x16d, 0x40}}, 0x40)

09:59:01 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="020a000007000000000000000000de0005001a0000000100041727fbb0fde70100000001040000534f8200000000ffffac1414b206000102c3abe8fbcc006c22dc1cff9ae063af3ccf75ceb4c385c8e8a8446e7549691b66091717d16f6e00a58486aef2ad7ce006651e61f39a451eee4994afc820d96bacc0bcc36aba008178e7bd238b12050000005c9b70e8cc158afd1f4349dbccde21f65dd90ca9a01c49198aa145db4a4882600cab228c54cf90e89c0f297574a6bbab11ba965d529bfacca815bda123ab0c9a200d2dcac2d4ca6f1ffffccf90327c3b678e5c710f44c2a96b792eed0000246abda8c91c5deda42cca14ee7902d0e7a1eab07c98df58f46ceb66f8873e03a2e61f98646be40f3c763fdc1f803d395935cc407c00fbeed5337fea6142382af3e164815457ac87ac49204a50a87183edd640695254ade7414b453088ca3c0a3e3280d5383c70a8ff006dbe6234f0c9ea094e4194d968632a0bec216fe4a712b011463b091a8b8ff5c27bc031954d25c006000000000000035dbc99ced8ccb5d6e2e39df34d95e02d22928ee0ccd2e26044e8b00000d90f86571f34c57be14e6c833e402cd0b50ce179fca6c107384e0e6718d75875fa4baeb624b97c54c336abb2a0588b97ca8a0f6d"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

09:59:01 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

09:59:01 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x802, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0)
write$uinput_user_dev(r0, 0x0, 0x0)
ioctl$UI_DEV_CREATE(r0, 0x5501)

09:59:01 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$packet(0x11, 0x0, 0x300)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write$binfmt_elf64(r3, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x16d, 0x40}}, 0x40)

[  268.864050][ T9499] EXT4-fs (loop3): bad geometry: block count 1080 exceeds size of device (16 blocks)
[  268.944445][ T9505] EXT4-fs (loop3): bad geometry: block count 1080 exceeds size of device (16 blocks)
09:59:02 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_CREATE(r0, 0x5501)

09:59:02 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

09:59:02 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

09:59:02 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x802, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0)
write$uinput_user_dev(r0, 0x0, 0x0)
ioctl$UI_DEV_CREATE(r0, 0x5501)

09:59:02 executing program 4:
socket$unix(0x1, 0x1, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write$binfmt_elf64(r2, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x16d, 0x40}}, 0x40)

09:59:02 executing program 1:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
uname(&(0x7f0000000040)=""/58)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd"], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r2, 0x0, 0x10005, 0x0)

09:59:02 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x802, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)

09:59:02 executing program 4:
socket$unix(0x1, 0x1, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write$binfmt_elf64(r2, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x16d, 0x40}}, 0x40)

09:59:02 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

09:59:02 executing program 3:

09:59:02 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

09:59:02 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x802, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)

09:59:02 executing program 4:
socket$unix(0x1, 0x1, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write$binfmt_elf64(r2, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x16d, 0x40}}, 0x40)

09:59:02 executing program 3:

09:59:03 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

09:59:03 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
dup(r2)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

09:59:03 executing program 3:

[  270.199311][    T0] NOHZ: local_softirq_pending 08
09:59:03 executing program 1:

09:59:03 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x802, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)

09:59:03 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
socket$packet(0x11, 0x2, 0x300)
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write$binfmt_elf64(r2, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x16d, 0x40}}, 0x40)

09:59:03 executing program 3:

09:59:03 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

09:59:03 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
dup(r2)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

09:59:03 executing program 3:

09:59:03 executing program 1:

09:59:04 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
socket$packet(0x11, 0x2, 0x300)
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write$binfmt_elf64(r2, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x16d, 0x40}}, 0x40)

09:59:04 executing program 5:

09:59:04 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

09:59:04 executing program 1:

09:59:04 executing program 3:

09:59:04 executing program 5:

09:59:04 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
socket$packet(0x11, 0x2, 0x300)
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write$binfmt_elf64(r2, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x16d, 0x40}}, 0x40)

09:59:04 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
dup(r2)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

09:59:04 executing program 1:

09:59:04 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

09:59:04 executing program 3:

09:59:04 executing program 5:

09:59:04 executing program 1:

09:59:04 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write$binfmt_elf64(r2, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x16d, 0x40}}, 0x40)

09:59:04 executing program 1:

09:59:04 executing program 3:

09:59:04 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

09:59:04 executing program 5:

09:59:04 executing program 1:

09:59:04 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

09:59:04 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write$binfmt_elf64(r2, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x16d, 0x40}}, 0x40)

09:59:04 executing program 3:

09:59:04 executing program 5:

09:59:04 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

09:59:04 executing program 1:

09:59:04 executing program 3:

09:59:04 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write$binfmt_elf64(r2, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x16d, 0x40}}, 0x40)

09:59:04 executing program 5:

09:59:04 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

09:59:04 executing program 1:

09:59:04 executing program 3:

09:59:05 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

09:59:05 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write$binfmt_elf64(r3, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x16d, 0x40}}, 0x40)

09:59:05 executing program 5:

09:59:05 executing program 1:

09:59:05 executing program 3:

09:59:05 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

09:59:05 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write$binfmt_elf64(r3, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x16d, 0x40}}, 0x40)

09:59:05 executing program 5:

09:59:05 executing program 1:

09:59:05 executing program 3:

09:59:05 executing program 1:

09:59:05 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="020a000007000000000000000000de0005001a0000000100041727fbb0fde70100000001040000534f8200000000ffffac1414b206000102c3abe8fbcc006c22dc1cff9ae063af3ccf75ceb4c385c8e8a8446e7549691b66091717d16f6e00a58486aef2ad7ce006651e61f39a451eee4994afc820d96bacc0bcc36aba008178e7bd238b12050000005c9b70e8cc158afd1f4349dbccde21f65dd90ca9a01c49198aa145db4a4882600cab228c54cf90e89c0f297574a6bbab11ba965d529bfacca815bda123ab0c9a200d2dcac2d4ca6f1ffffccf90327c3b678e5c710f44c2a96b792eed0000246abda8c91c5deda42cca14ee7902d0e7a1eab07c98df58f46ceb66f8873e03a2e61f98646be40f3c763fdc1f803d395935cc407c00fbeed5337fea6142382af3e164815457ac87ac49204a50a87183edd640695254ade7414b453088ca3c0a3e3280d5383c70a8ff006dbe6234f0c9ea094e4194d968632a0bec216fe4a712b011463b091a8b8ff5c27bc031954d25c006000000000000035dbc99ced8ccb5d6e2e39df34d95e02d22928ee0ccd2e26044e8b00000d90f86571f34c57be14e6c833e402cd0b50ce179fca6c107384e0e6718d75875fa4baeb624b97c54c336abb2a0588b97ca8a0f6d"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

09:59:05 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

09:59:05 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write$binfmt_elf64(r3, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x16d, 0x40}}, 0x40)

09:59:05 executing program 5:

09:59:05 executing program 3:

09:59:05 executing program 1:

09:59:05 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

09:59:05 executing program 5:

09:59:05 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_dev$tty20(0xc, 0x4, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x16d, 0x40}}, 0x40)

09:59:05 executing program 3:

09:59:05 executing program 1:

09:59:05 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

09:59:05 executing program 5:

09:59:05 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

09:59:05 executing program 1:

09:59:05 executing program 3:

09:59:05 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_dev$tty20(0xc, 0x4, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x16d, 0x40}}, 0x40)

09:59:05 executing program 5:

09:59:05 executing program 3:

09:59:05 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

09:59:06 executing program 1:

09:59:06 executing program 5:

09:59:06 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_dev$tty20(0xc, 0x4, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x16d, 0x40}}, 0x40)

09:59:06 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

09:59:06 executing program 1:

09:59:06 executing program 3:

09:59:06 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

09:59:06 executing program 5:

09:59:06 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write$binfmt_elf64(r3, 0x0, 0x0)

09:59:06 executing program 3:

09:59:06 executing program 1:

09:59:06 executing program 5:

09:59:06 executing program 3:

09:59:06 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

09:59:06 executing program 1:

09:59:06 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

09:59:06 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write$binfmt_elf64(r3, 0x0, 0x0)

09:59:06 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000540)=0x2, 0x2}, {&(0x7f0000000580)=0x2, 0x1}, {0x0, 0x2}, {0x0}, {&(0x7f00000006c0)=0x1, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd, 0x1f, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

09:59:06 executing program 5:
prlimit64(0x0, 0x0, &(0x7f0000000280)={0x0, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
sched_setattr(r0, 0x0, 0x0)
pipe(0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0xfd89)
getsockopt$inet6_buf(r1, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9)

09:59:06 executing program 1:

09:59:06 executing program 1:

09:59:06 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[]}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

09:59:06 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000540)=0x2, 0x2}, {&(0x7f0000000580)=0x2, 0x1}, {0x0, 0x2}, {0x0}, {&(0x7f00000006c0)=0x1, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd, 0x1f, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

09:59:06 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write$binfmt_elf64(r3, 0x0, 0x0)

09:59:06 executing program 5:

09:59:06 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

09:59:06 executing program 1:

09:59:06 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[]}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

09:59:06 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write$binfmt_elf64(r3, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16d, 0x40}}, 0x40)

09:59:06 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000540)=0x2, 0x2}, {&(0x7f0000000580)=0x2, 0x1}, {0x0, 0x2}, {0x0}, {&(0x7f00000006c0)=0x1, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd, 0x1f, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

09:59:06 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1000000}, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000140))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r2 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
write(r2, &(0x7f00000004c0)="3161d417452c8f6d46edb3b1077f2abaa85e3489c66107ab7d9aeb42aa515f23c9150bfd105fa1be4e0415cb2c2d4a1cdff5ab24d3676cc093ea0ffa364b7ec5a99d58d2267958d4c532", 0x4a)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0)
sendfile(r2, r2, &(0x7f0000000200), 0xff8)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
r3 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000180)='Z\x00')

09:59:06 executing program 5:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {0x0}, {&(0x7f0000000280), 0x2}, {0x0}, {&(0x7f0000000340)}, {&(0x7f0000000380)=0x1}, {0x0}, {&(0x7f0000000540)=0x2}, {0x0}, {0x0}, {&(0x7f0000000700)=0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001a00)}], 0xd, 0x14, 0x0, 0x0, 0x0)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

09:59:07 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

09:59:07 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write$binfmt_elf64(r3, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16d, 0x40}}, 0x40)

09:59:07 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

09:59:07 executing program 5:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{&(0x7f0000000000)=0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000300)}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd, 0xa, &(0x7f0000002080)={0x77359400}, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

09:59:07 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[]}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

09:59:07 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000540)=0x2, 0x2}, {&(0x7f0000000580)=0x2, 0x1}, {0x0, 0x2}, {0x0}, {&(0x7f00000006c0)=0x1, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd, 0x1f, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

09:59:07 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write$binfmt_elf64(r3, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16d, 0x40}}, 0x40)

09:59:07 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

09:59:07 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB]}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

09:59:07 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x8000, 0x0)
dup3(r4, r5, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0)

09:59:08 executing program 1:
creat(&(0x7f0000000700)='./bus\x00', 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x40000fe)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r2, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = inotify_init()
r5 = inotify_add_watch(r4, &(0x7f0000000000)='.\x00', 0x80000000)
inotify_rm_watch(r0, r5)
creat(&(0x7f0000000700)='./bus\x00', 0x0)

09:59:08 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

09:59:08 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB]}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

09:59:08 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write$binfmt_elf64(r3, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40)

09:59:08 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000680)="ff5b93baf4715971ba778a4091bf32a5307d1aad95db841680c544d506ab1c3405176a92ebe5ce0025e269e33dba850c0edff31990e83f65d40e8aec1f8801132a4088456b3f9166215a20ce4113818fe8668752a06696602189d19eb27eeb7c7a8fe69d0e65a052a93b5c4cf71bc11c4bc0bc7fbc5637850e7cf553dc9683e2a77d09196b818171d8e2b85add4e45494bc588edfedd7bd8045fa963bdd79c6885fb32e67153a5050367a53907b55917d7f298c40364e253", 0xffffffe1)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1000000}, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080), 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000140))
setreuid(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r4 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
write(r4, &(0x7f00000004c0)="3161d417452c8f6d46edb3b1077f2abaa85e3489c66107ab7d9aeb42aa515f23c9150bfd105fa1be4e0415cb2c2d4a1cdff5ab24d3676cc093ea0ffa364b7ec5a99d58d2267958d4c532", 0x4a)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r4, 0x0)
sendfile(r4, r4, &(0x7f0000000200), 0xff8)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
r5 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000180)='Z\x00')

09:59:08 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

09:59:08 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB]}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

09:59:08 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write$binfmt_elf64(r3, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40)

09:59:08 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x24044001, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10)
close(r0)

09:59:08 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

[  274.895017][ T9841] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
09:59:08 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write$binfmt_elf64(r3, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40)

09:59:08 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x180}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

09:59:08 executing program 1:
open(&(0x7f00000000c0)='./file0\x00', 0x1070c5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000002900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = dup2(r5, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
sync_file_range(r6, 0x0, 0x2, 0x1)

09:59:16 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

09:59:16 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x180}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

09:59:16 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

09:59:16 executing program 0:
close(0xffffffffffffffff)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(0xffffffffffffffff, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

09:59:16 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x8000, 0x0)
dup3(r3, r4, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0)

09:59:16 executing program 1:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
socket$inet6_tcp(0xa, 0x1, 0x0)
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {0x0, 0x1}, {0x0}, {0x0}, {0x0, 0x1}, {&(0x7f0000000300)=0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd, 0xc, 0x0, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

09:59:17 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

09:59:17 executing program 1:
perf_event_open(&(0x7f0000000040)={0x2, 0x7c, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)

09:59:17 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x180}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="020a000007000000000000000000de0005001a0000000100041727fbb0fde70100000001040000534f8200000000ffffac1414b206000102c3abe8fbcc006c22dc1cff9ae063af3ccf75ceb4c385c8e8a8446e7549691b66091717d16f6e00a58486aef2ad7ce006651e61f39a451eee4994afc820d96bacc0bcc36aba008178e7bd238b12050000005c9b70e8cc158afd1f4349dbccde21f65dd90ca9a01c49198aa145db4a4882600cab228c54cf90e89c0f297574a6bbab11ba965d529bfacca815bda123ab0c9a200d2dcac2d4ca6f1ffffccf90327c3b678e5c710f44c2a96b792eed0000246abda8c91c5deda42cca14ee7902d0e7a1eab07c98df58f46ceb66f8873e03a2e61f98646be40f3c763fdc1f803d395935cc407c00fbeed5337fea6142382af3e164815457ac87ac49204a50a87183edd640695254ade7414b453088ca3c0a3e3280d5383c70a8ff006dbe6234f0c9ea094e4194d968632a0bec216fe4a712b011463b091a8b8ff5c27bc031954d25c006000000000000035dbc99ced8ccb5d6e2e39df34d95e02d22928ee0ccd2e26044e8b00000d90f86571f34c57be14e6c833e402cd0b50ce179fca6c107384e0e6718d75875fa4baeb624b97c54c336abb2a0588b97ca8a0f6d"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

09:59:17 executing program 5:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x8025}, {0xffffffffffffffff, 0x2a}, {}, {0xffffffffffffffff, 0x5121}, {}], 0x2d, 0x2b)

09:59:17 executing program 0:
close(0xffffffffffffffff)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(0xffffffffffffffff, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

09:59:17 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x240}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

09:59:17 executing program 1:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58)
accept$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x0)

09:59:17 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802000000000000000000000105000600200000000a000000000000000b4700e50000070000001f00f6ffffe4002500000000000002000100000000d62d09090be70416e518590744d65fefbe000000020000627c05000500000000000a00000000731f65000000ff170000000000f692b9a7008807a4cbadbed302003bca79246c1056b3501dc379ed065b97a1544b0fa16a9687f0ee7b40e6e64b592a34a024ef4bb76dd1bae477abc98201017e1a0675923bf5f0fb50fcd75c2e3ebb4f42c5ddfd05f4ccc3c3a9d8a1f2b593a071f1aa6ea95540925a5cbc44df705eecd4d0a7ecd857c9ad15061c6c78dd8eac2e454f28d8eb632aba7e5fbec94fe1246da56cf57bc16c31cb45aae93b3d2c53de18be5339713d719b99391ee16f11eaa6f728604e7e9bdc3e06d580faf09122035c1fdd0be8d0d233365a6621e783ff00000037b53a8823df241f55cac763cadf24ba329af721c0b3a76d8bbdb57e62cd430700b1e530fd5e1c9b3f1fe15e0d0100000000000000010009ae55813d3151f252b5ca7ee6a1ca791c6e5e6c4d21134108cd1204b21c1fbbbcf78d63283eed89e87c77d9199ba59b1bba40dba8eae720b424df4285162545f52fe5ddfd762659d41dfb2a508695e6bc6585f969d92c6c4e2d9439342a4acdd851af4ea0abddc23680d66bc45e463aad9ae9d6514280728d466b26ff717bf54e2e9d1dc6473d465bfc40c4994f5e51c20ae5b2a740f9d06747211864bd4d1958971a095541fc8d2f2e7ab043aaf604e4dae1b3"], 0x240}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

09:59:17 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

09:59:17 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f00000005c0)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0)
write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="a4bc000000000000000600"], 0xb)
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)

09:59:17 executing program 0:
close(0xffffffffffffffff)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(0xffffffffffffffff, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

09:59:17 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x240}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

[  285.237843][ T9928] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 970769)
[  285.249143][ T9928] FAT-fs (loop5): Filesystem has been set read-only
[  285.256359][ T9928] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 970769)
[  290.670300][    T0] NOHZ: local_softirq_pending 08
09:59:26 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000540)=0x2, 0x2}, {&(0x7f0000000580)=0x2, 0x1}, {0x0, 0x2}, {0x0}, {&(0x7f00000006c0)=0x1, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd, 0x1f, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

09:59:26 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe(&(0x7f0000000d00)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
socket(0x400000000000010, 0x802, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000002a003f070000000000000028d488509c01"], 0x1}}, 0x0)
write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0)

09:59:26 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802000000000000000000000105000600200000000a000000000000000b4700e50000070000001f00f6ffffe4002500000000000002000100000000d62d09090be70416e518590744d65fefbe000000020000627c05000500000000000a00000000731f65000000ff170000000000f692b9a7008807a4cbadbed302003bca79246c1056b3501dc379ed065b97a1544b0fa16a9687f0ee7b40e6e64b592a34a024ef4bb76dd1bae477abc98201017e1a0675923bf5f0fb50fcd75c2e3ebb4f42c5ddfd05f4ccc3c3a9d8a1f2b593a071f1aa6ea95540925a5cbc44df705eecd4d0a7ecd857c9ad15061c6c78dd8eac2e454f28d8eb632aba7e5fbec94fe1246da56cf57bc16c31cb45aae93b3d2c53de18be5339713d719b99391ee16f11eaa6f728604e7e9bdc3e06d580faf09122035c1fdd0be8d0d233365a6621e783ff00000037b53a8823df241f55cac763cadf24ba329af721c0b3a76d8bbdb57e62cd430700b1e530fd5e1c9b3f1fe15e0d0100000000000000010009ae55813d3151f252b5ca7ee6a1ca791c6e5e6c4d21134108cd1204b21c1fbbbcf78d63283eed89e87c77d9199ba59b1bba40dba8eae720b424df4285162545f52fe5ddfd762659d41dfb2a508695e6bc6585f969d92c6c4e2d9439342a4acdd851af4ea0abddc23680d66bc45e463aad9ae9d6514280728d466b26ff717bf54e2e9d1dc6473d465bfc40c4994f5e51c20ae5b2a740f9d06747211864bd4d1958971a095541fc8d2f2e7ab043aaf604e4dae1b3a3a160b2f0de48ff76c2c27618d5dbca82e8970a2a64762bc6b3acad8c4f1a606cad68c8698fe8e2ce141af48a62be57b485bcd108099ffba77e387c9eeef93ce753146475a23d8cde6dc269f0f11b730334531b30a9e9b5baf2bed6d8cbc821"], 0x2a0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

09:59:26 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

09:59:26 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r5, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

09:59:26 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  293.236146][   T26] audit: type=1326 audit(1586685566.704:13): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9952 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
[  293.240102][ T9968] selinux_netlink_send: 5 callbacks suppressed
[  293.240116][ T9968] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9968 comm=syz-executor.1
09:59:26 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x2a0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="020a000007000000000000000000de0005001a0000000100041727fbb0fde70100000001040000534f8200000000ffffac1414b206000102c3abe8fbcc006c22dc1cff9ae063af3ccf75ceb4c385c8e8a8446e7549691b66091717d16f6e00a58486aef2ad7ce006651e61f39a451eee4994afc820d96bacc0bcc36aba008178e7bd238b12050000005c9b70e8cc158afd1f4349dbccde21f65dd90ca9a01c49198aa145db4a4882600cab228c54cf90e89c0f297574a6bbab11ba965d529bfacca815bda123ab0c9a200d2dcac2d4ca6f1ffffccf90327c3b678e5c710f44c2a96b792eed0000246abda8c91c5deda42cca14ee7902d0e7a1eab07c98df58f46ceb66f8873e03a2e61f98646be40f3c763fdc1f803d395935cc407c00fbeed5337fea6142382af3e164815457ac87ac49204a50a87183edd640695254ade7414b453088ca3c0a3e3280d5383c70a8ff006dbe6234f0c9ea094e4194d968632a0bec216fe4a712b011463b091a8b8ff5c27bc031954d25c006000000000000035dbc99ced8ccb5d6e2e39df34d95e02d22928ee0ccd2e26044e8b00000d90f86571f34c57be14e6c833e402cd0b50ce179fca6c107384e0e6718d75875fa4baeb624b97c54c336abb2a0588b97ca8a0f6d"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

[  293.391657][ T9974] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  293.400840][ T9974] FAT-fs (loop5): Filesystem has been set read-only
[  293.410445][ T9974] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  293.420412][ T9974] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  293.430280][ T9974] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
09:59:26 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000540)=0x2, 0x2}, {&(0x7f0000000580)=0x2, 0x1}, {0x0, 0x2}, {0x0}, {&(0x7f00000006c0)=0x1, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd, 0x1f, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

09:59:27 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

09:59:27 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x2a0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="020a000007000000000000000000de0005001a0000000100041727fbb0fde70100000001040000534f8200000000ffffac1414b206000102c3abe8fbcc006c22dc1cff9ae063af3ccf75ceb4c385c8e8a8446e7549691b66091717d16f6e00a58486aef2ad7ce006651e61f39a451eee4994afc820d96bacc0bcc36aba008178e7bd238b12050000005c9b70e8cc158afd1f4349dbccde21f65dd90ca9a01c49198aa145db4a4882600cab228c54cf90e89c0f297574a6bbab11ba965d529bfacca815bda123ab0c9a200d2dcac2d4ca6f1ffffccf90327c3b678e5c710f44c2a96b792eed0000246abda8c91c5deda42cca14ee7902d0e7a1eab07c98df58f46ceb66f8873e03a2e61f98646be40f3c763fdc1f803d395935cc407c00fbeed5337fea6142382af3e164815457ac87ac49204a50a87183edd640695254ade7414b453088ca3c0a3e3280d5383c70a8ff006dbe6234f0c9ea094e4194d968632a0bec216fe4a712b011463b091a8b8ff5c27bc031954d25c006000000000000035dbc99ced8ccb5d6e2e39df34d95e02d22928ee0ccd2e26044e8b00000d90f86571f34c57be14e6c833e402cd0b50ce179fca6c107384e0e6718d75875fa4baeb624b97c54c336abb2a0588b97ca8a0f6d"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

[  293.597431][ T9968] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9968 comm=syz-executor.1
[  293.671321][ T9968] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9968 comm=syz-executor.1
09:59:27 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000540)=0x2, 0x2}, {&(0x7f0000000580)=0x2, 0x1}, {0x0, 0x2}, {0x0}, {&(0x7f00000006c0)=0x1, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd, 0x1f, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

[  293.742406][ T9968] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9968 comm=syz-executor.1
[  293.790804][ T9968] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9968 comm=syz-executor.1
09:59:27 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802000000000000000000000105000600200000000a000000000000000b4700e50000070000001f00f6ffffe4002500000000000002000100000000d62d09090be70416e518590744d65fefbe000000020000627c05000500000000000a00000000731f65000000ff170000000000f692b9a7008807a4cbadbed302003bca79246c1056b3501dc379ed065b97a1544b0fa16a9687f0ee7b40e6e64b592a34a024ef4bb76dd1bae477abc98201017e1a0675923bf5f0fb50fcd75c2e3ebb4f42c5ddfd05f4ccc3c3a9d8a1f2b593a071f1aa6ea95540925a5cbc44df705eecd4d0a7ecd857c9ad15061c6c78dd8eac2e454f28d8eb632aba7e5fbec94fe1246da56cf57bc16c31cb45aae93b3d2c53de18be5339713d719b99391ee16f11eaa6f728604e7e9bdc3e06d580faf09122035c1fdd0be8d0d233365a6621e783ff00000037b53a8823df241f55cac763cadf24ba329af721c0b3a76d8bbdb57e62cd430700b1e530fd5e1c9b3f1fe15e0d0100000000000000010009ae55813d3151f252b5ca7ee6a1ca791c6e5e6c4d21134108cd1204b21c1fbbbcf78d63283eed89e87c77d9199ba59b1bba40dba8eae720b424df4285162545f52fe5ddfd762659d41dfb2a508695e6bc6585f969d92c6c4e2d9439342a4acdd851af4ea0abddc23680d66bc45e463aad9ae9d6514280728d466b26ff717bf54e2e9d1dc6473d465bfc40c4994f5e51c20ae5b2a740f9d06747211864bd4d1958971a095541fc8d2f2e7ab043aaf604e4dae1b3a3a160b2f0de48ff76c2c27618d5dbca82e8970a2a64762bc6b3acad8c4f1a606cad68c8698fe8e2ce141af48a62be57b485bcd108099ffba77e387c9eeef93ce753146475a23d8cde6dc269f0f11b730334531b30a9e9b5baf2bed6d8cbc82136a1f065b6ac46d3591aa5c6498cd376d9540d3194d2c725eca5e53d19c494c0cec11177679482096d99eef4c48f05e5"], 0x2d0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

09:59:27 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000540)=0x2, 0x2}, {&(0x7f0000000580)=0x2, 0x1}, {0x0, 0x2}, {0x0}, {&(0x7f00000006c0)=0x1, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd, 0x1f, 0x0, 0x0, 0x0)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

[  293.870033][ T9968] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9968 comm=syz-executor.1
[  293.944176][ T9968] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9968 comm=syz-executor.1
[  293.949399][ T9952] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  294.008841][ T9968] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9968 comm=syz-executor.1
[  294.057311][ T9968] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9968 comm=syz-executor.1
[  294.070947][ T9968] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9968 comm=syz-executor.1
09:59:27 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r5, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

09:59:27 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

09:59:27 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r5, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

09:59:27 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000540)=0x2, 0x2}, {&(0x7f0000000580)=0x2, 0x1}, {0x0, 0x2}, {0x0}, {&(0x7f00000006c0)=0x1, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd, 0x1f, 0x0, 0x0, 0x0)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

[  294.317675][   T26] audit: type=1326 audit(1586685567.784:14): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10007 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
[  294.411400][   T26] audit: type=1326 audit(1586685567.874:15): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10014 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
[  294.578277][T10027] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  294.588085][T10027] FAT-fs (loop1): Filesystem has been set read-only
[  294.597870][T10027] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000500)
[  294.608387][T10027] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000500)
[  294.633938][T10027] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000500)
[  295.015442][T10025] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  295.023356][T10025] FAT-fs (loop5): Filesystem has been set read-only
[  295.117403][T10014] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000500)
09:59:29 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

09:59:29 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x2d0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

09:59:29 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000540)=0x2, 0x2}, {&(0x7f0000000580)=0x2, 0x1}, {0x0, 0x2}, {0x0}, {&(0x7f00000006c0)=0x1, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd, 0x1f, 0x0, 0x0, 0x0)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

09:59:29 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

09:59:29 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r5, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

09:59:29 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f00000001c0)="81b4a37f0f474be03f9eb8a2929931a819ebdcbbfc94cee514e1", 0x1a}], 0x0, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

09:59:29 executing program 3:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000540)=0x2, 0x2}, {&(0x7f0000000580)=0x2, 0x1}, {0x0, 0x2}, {0x0}, {&(0x7f00000006c0)=0x1, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd, 0x1f, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

09:59:29 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

09:59:29 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x2d0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

[  296.456845][   T26] audit: type=1326 audit(1586685569.924:16): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10037 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
09:59:30 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x2e8}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

09:59:30 executing program 3:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000540)=0x2, 0x2}, {&(0x7f0000000580)=0x2, 0x1}, {0x0, 0x2}, {0x0}, {&(0x7f00000006c0)=0x1, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd, 0x1f, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

09:59:30 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

09:59:30 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

09:59:30 executing program 3:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000540)=0x2, 0x2}, {&(0x7f0000000580)=0x2, 0x1}, {0x0, 0x2}, {0x0}, {&(0x7f00000006c0)=0x1, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd, 0x1f, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

09:59:30 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="00068a7dd8a16795e08348c14dadc3cae622450fbe7dea329b3f475919d59b95e0bfc6b372148ca894a9a1a23e220ad9d3513f2b4f06b405381bf8c7784a744eaf295764d3c9f91d5fe01d83d1347d0000000000000000000000000000000000000000000000000000e5a329208155a5c29a9c62db109533d31bc1e2d34025955e171cfba60ed3b592dd0cf8bba87a338b4ae0357c55ce0eacb7d930f586549418d4447c549b750049619549756f76d6949ceed4fd74c7870c9b35c2df6672edc450cce030618925aa1f31da9d6554900606ae1f4352090a4ce52a92a8e6fb9b6168eab610eec77ba30494bb059a5f2a8c06166611b5ea2eb5cfbe9f6c6ca462deef6e68969102babbf9a5926796beac"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r5, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

09:59:30 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x2e8}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

09:59:30 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

[  297.634559][   T26] audit: type=1326 audit(1586685571.104:17): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10086 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
[  297.799973][T10105] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  297.808710][T10105] FAT-fs (loop5): Filesystem has been set read-only
[  297.816832][T10105] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  297.826471][T10105] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  297.836124][T10105] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  298.200843][T10086] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
09:59:39 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f00000001c0)="81b4a37f0f474be03f9eb8a2929931a819ebdcbbfc94cee514e1", 0x1a}], 0x0, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

09:59:39 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000540)=0x2, 0x2}, {&(0x7f0000000580)=0x2, 0x1}, {0x0, 0x2}, {0x0}, {&(0x7f00000006c0)=0x1, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd, 0x1f, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

09:59:39 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x2e8}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

09:59:39 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

09:59:39 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

09:59:39 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r5, 0x0, 0x0, 0x0)

09:59:39 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000540)=0x2, 0x2}, {&(0x7f0000000580)=0x2, 0x1}, {0x0, 0x2}, {0x0}, {&(0x7f00000006c0)=0x1, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd, 0x1f, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

[  306.146884][   T26] audit: type=1326 audit(1586685579.615:18): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10119 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
09:59:39 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x2f4}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

09:59:39 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000540)=0x2, 0x2}, {&(0x7f0000000580)=0x2, 0x1}, {0x0, 0x2}, {0x0}, {&(0x7f00000006c0)=0x1, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd, 0x1f, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

09:59:40 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

09:59:40 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg2\x00'})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x4000)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000680)="ff5b93baf4715971ba778a4091bf32a5307d1aad95db841680c544d506ab1c3405176a92ebe5ce0025e269e33dba850c0edff31990e83f65d40e8aec1f8801132a4088456b3f9166215a20ce4113818fe8668752a06696602189d19eb27eeb7c7a8fe69d0e65a052a93b5c4cf71bc11c4bc0bc7fbc5637850e7cf553dc9683e2a77d09196b818171d8e2b85add4e45494bc588edfedd7bd8045fa963bdd79c6885fb32e67153a5050367a53907b55917d7f298c40364e253", 0xffffffe1)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1000000}, 0x0)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r4 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
write(r4, &(0x7f00000004c0)="3161d417452c8f6d46edb3b1077f2abaa85e3489c66107ab7d9aeb42aa515f23c9150bfd105fa1be4e0415cb2c2d4a1cdff5ab24d3676cc093ea0ffa364b7ec5a99d58d2267958d4c5320b", 0x4b)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r4, 0x0)
sendfile(r4, r4, &(0x7f0000000200), 0xff8)
r5 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000180)='Z\x00')

09:59:40 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r5, 0x0, 0x0, 0x0)

09:59:40 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000540)=0x2, 0x2}, {&(0x7f0000000580)=0x2, 0x1}, {0x0, 0x2}, {0x0}, {&(0x7f00000006c0)=0x1, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd, 0x1f, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

09:59:40 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x2f4}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

[  307.071275][   T26] audit: type=1326 audit(1586685580.535:19): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10165 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
09:59:40 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

09:59:40 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000540)=0x2, 0x2}, {&(0x7f0000000580)=0x2, 0x1}, {0x0, 0x2}, {0x0}, {&(0x7f00000006c0)=0x1, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd, 0x1f, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

09:59:40 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x2f4}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

09:59:40 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

09:59:41 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802000000000000000000000105000600200000000a000000000000000b4700e50000070000001f00f6ffffe4002500000000000002000100000000d62d09090be70416e518590744d65fefbe000000020000627c05000500000000000a00000000731f65000000ff170000000000f692b9a7008807a4cbadbed302003bca79246c1056b3501dc379ed065b97a1544b0fa16a9687f0ee7b40e6e64b592a34a024ef4bb76dd1bae477abc98201017e1a0675923bf5f0fb50fcd75c2e3ebb4f42c5ddfd05f4ccc3c3a9d8a1f2b593a071f1aa6ea95540925a5cbc44df705eecd4d0a7ecd857c9ad15061c6c78dd8eac2e454f28d8eb632aba7e5fbec94fe1246da56cf57bc16c31cb45aae93b3d2c53de18be5339713d719b99391ee16f11eaa6f728604e7e9bdc3e06d580faf09122035c1fdd0be8d0d233365a6621e783ff00000037b53a8823df241f55cac763cadf24ba329af721c0b3a76d8bbdb57e62cd430700b1e530fd5e1c9b3f1fe15e0d0100000000000000010009ae55813d3151f252b5ca7ee6a1ca791c6e5e6c4d21134108cd1204b21c1fbbbcf78d63283eed89e87c77d9199ba59b1bba40dba8eae720b424df4285162545f52fe5ddfd762659d41dfb2a508695e6bc6585f969d92c6c4e2d9439342a4acdd851af4ea0abddc23680d66bc45e463aad9ae9d6514280728d466b26ff717bf54e2e9d1dc6473d465bfc40c4994f5e51c20ae5b2a740f9d06747211864bd4d1958971a095541fc8d2f2e7ab043aaf604e4dae1b3a3a160b2f0de48ff76c2c27618d5dbca82e8970a2a64762bc6b3acad8c4f1a606cad68c8698fe8e2ce141af48a62be57b485bcd108099ffba77e387c9eeef93ce753146475a23d8cde6dc269f0f11b730334531b30a9e9b5baf2bed6d8cbc82136a1f065b6ac46d3591aa5c6498cd376d9540d3194d2c725eca5e53d19c494c0cec11177679482096d99eef4c48f05e50cf1546220228f11089022c48584f8a5258c374c74b132765f15c8e96d8ba324b628796bdabe11532602"], 0x2fa}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

09:59:41 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r5, 0x0, 0x0, 0x0)

09:59:41 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000540)=0x2, 0x2}, {&(0x7f0000000580)=0x2, 0x1}, {0x0, 0x2}, {0x0}, {&(0x7f00000006c0)=0x1, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd, 0x1f, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

09:59:41 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

09:59:41 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x2fa}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

09:59:41 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000540)=0x2, 0x2}, {&(0x7f0000000580)=0x2, 0x1}, {0x0, 0x2}, {0x0}, {&(0x7f00000006c0)=0x1, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd, 0x1f, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

09:59:41 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

09:59:41 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000540)=0x2, 0x2}, {&(0x7f0000000580)=0x2, 0x1}, {0x0, 0x2}, {0x0}, {&(0x7f00000006c0)=0x1, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd, 0x1f, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

[  308.159805][   T26] audit: type=1326 audit(1586685581.625:20): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10201 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
09:59:41 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

09:59:41 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802000000000000000000000105000600200000000a000000000000000b4700e50000070000001f00f6ffffe4002500000000000002000100000000d62d09090be70416e518590744d65fefbe000000020000627c05000500000000000a00000000731f65000000ff170000000000f692b9a7008807a4cbadbed302003bca79246c1056b3501dc379ed065b97a1544b0fa16a9687f0ee7b40e6e64b592a34a024ef4bb76dd1bae477abc98201017e1a0675923bf5f0fb50fcd75c2e3ebb4f42c5ddfd05f4ccc3c3a9d8a1f2b593a071f1aa6ea95540925a5cbc44df705eecd4d0a7ecd857c9ad15061c6c78dd8eac2e454f28d8eb632aba7e5fbec94fe1246da56cf57bc16c31cb45aae93b3d2c53de18be5339713d719b99391ee16f11eaa6f728604e7e9bdc3e06d580faf09122035c1fdd0be8d0d233365a6621e783ff00000037b53a8823df241f55cac763cadf24ba329af721c0b3a76d8bbdb57e62cd430700b1e530fd5e1c9b3f1fe15e0d0100000000000000010009ae55813d3151f252b5ca7ee6a1ca791c6e5e6c4d21134108cd1204b21c1fbbbcf78d63283eed89e87c77d9199ba59b1bba40dba8eae720b424df4285162545f52fe5ddfd762659d41dfb2a508695e6bc6585f969d92c6c4e2d9439342a4acdd851af4ea0abddc23680d66bc45e463aad9ae9d6514280728d466b26ff717bf54e2e9d1dc6473d465bfc40c4994f5e51c20ae5b2a740f9d06747211864bd4d1958971a095541fc8d2f2e7ab043aaf604e4dae1b3a3a160b2f0de48ff76c2c27618d5dbca82e8970a2a64762bc6b3acad8c4f1a606cad68c8698fe8e2ce141af48a62be57b485bcd108099ffba77e387c9eeef93ce753146475a23d8cde6dc269f0f11b730334531b30a9e9b5baf2bed6d8cbc82136a1f065b6ac46d3591aa5c6498cd376d9540d3194d2c725eca5e53d19c494c0cec11177679482096d99eef4c48f05e50cf1546220228f11089022c48584f8a5258c374c74b132765f15c8e96d8ba324b628796bdabe11532602"], 0x2fa}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

09:59:41 executing program 1:
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x2, 0x4}}, 0x2e)
ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000040))

09:59:42 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000540)=0x2, 0x2}, {&(0x7f0000000580)=0x2, 0x1}, {0x0, 0x2}, {0x0}, {&(0x7f00000006c0)=0x1, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd, 0x1f, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

09:59:42 executing program 1:
r0 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
write(r0, &(0x7f00000004c0)='1a', 0x2)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0)
sendfile(r0, r0, &(0x7f0000000200), 0xff8)
r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='Z\x00')

09:59:42 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="00068a7dd8a16795e08348c14dadc3cae622450fbe7dea329b3f475919d59b95e0bfc6b372148ca894a9a1a23e220ad9d3513f2b4f06b405381bf8c7784a744eaf295764d3c9f91d5fe01d83d1347d0000000000000000000000000000000000000000000000000000e5a329208155a5c29a9c62db109533d31bc1e2d34025955e171cfba60ed3b592dd0cf8bba87a338b4ae0357c55ce0eacb7d930f586549418d4447c549b750049619549756f76d6949ceed4fd74c7870c9b35c2df6672edc450cce030618925aa1f31da9d6554900606ae1f4352090a4ce52a92a8e6fb9b6168eab610eec77ba30494bb059a5f2a8c06166611b5ea2eb5cfbe9f6c6ca462deef6e68969102babbf9a5926796beac"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

09:59:42 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000540)=0x2, 0x2}, {&(0x7f0000000580)=0x2, 0x1}, {0x0, 0x2}, {0x0}, {&(0x7f00000006c0)=0x1, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd, 0x1f, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

09:59:42 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000540)=0x2, 0x2}, {&(0x7f0000000580)=0x2, 0x1}, {0x0, 0x2}, {0x0}, {&(0x7f00000006c0)=0x1, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd, 0x1f, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

09:59:42 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x2fd}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="020a000007000000000000000000de0005001a0000000100041727fbb0fde70100000001040000534f8200000000ffffac1414b206000102c3abe8fbcc006c22dc1cff9ae063af3ccf75ceb4c385c8e8a8446e7549691b66091717d16f6e00a58486aef2ad7ce006651e61f39a451eee4994afc820d96bacc0bcc36aba008178e7bd238b12050000005c9b70e8cc158afd1f4349dbccde21f65dd90ca9a01c49198aa145db4a4882600cab228c54cf90e89c0f297574a6bbab11ba965d529bfacca815bda123ab0c9a200d2dcac2d4ca6f1ffffccf90327c3b678e5c710f44c2a96b792eed0000246abda8c91c5deda42cca14ee7902d0e7a1eab07c98df58f46ceb66f8873e03a2e61f98646be40f3c763fdc1f803d395935cc407c00fbeed5337fea6142382af3e164815457ac87ac49204a50a87183edd640695254ade7414b453088ca3c0a3e3280d5383c70a8ff006dbe6234f0c9ea094e4194d968632a0bec216fe4a712b011463b091a8b8ff5c27bc031954d25c006000000000000035dbc99ced8ccb5d6e2e39df34d95e02d22928ee0ccd2e26044e8b00000d90f86571f34c57be14e6c833e402cd0b50ce179fca6c107384e0e6718d75875fa4baeb624b97c54c336abb2a0588b97ca8a0f6d"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

09:59:42 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

09:59:42 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802000000000000000000000105000600200000000a000000000000000b4700e50000070000001f00f6ffffe4002500000000000002000100000000d62d09090be70416e518590744d65fefbe000000020000627c05000500000000000a00000000731f65000000ff170000000000f692b9a7008807a4cbadbed302003bca79246c1056b3501dc379ed065b97a1544b0fa16a9687f0ee7b40e6e64b592a34a024ef4bb76dd1bae477abc98201017e1a0675923bf5f0fb50fcd75c2e3ebb4f42c5ddfd05f4ccc3c3a9d8a1f2b593a071f1aa6ea95540925a5cbc44df705eecd4d0a7ecd857c9ad15061c6c78dd8eac2e454f28d8eb632aba7e5fbec94fe1246da56cf57bc16c31cb45aae93b3d2c53de18be5339713d719b99391ee16f11eaa6f728604e7e9bdc3e06d580faf09122035c1fdd0be8d0d233365a6621e783ff00000037b53a8823df241f55cac763cadf24ba329af721c0b3a76d8bbdb57e62cd430700b1e530fd5e1c9b3f1fe15e0d0100000000000000010009ae55813d3151f252b5ca7ee6a1ca791c6e5e6c4d21134108cd1204b21c1fbbbcf78d63283eed89e87c77d9199ba59b1bba40dba8eae720b424df4285162545f52fe5ddfd762659d41dfb2a508695e6bc6585f969d92c6c4e2d9439342a4acdd851af4ea0abddc23680d66bc45e463aad9ae9d6514280728d466b26ff717bf54e2e9d1dc6473d465bfc40c4994f5e51c20ae5b2a740f9d06747211864bd4d1958971a095541fc8d2f2e7ab043aaf604e4dae1b3a3a160b2f0de48ff76c2c27618d5dbca82e8970a2a64762bc6b3acad8c4f1a606cad68c8698fe8e2ce141af48a62be57b485bcd108099ffba77e387c9eeef93ce753146475a23d8cde6dc269f0f11b730334531b30a9e9b5baf2bed6d8cbc82136a1f065b6ac46d3591aa5c6498cd376d9540d3194d2c725eca5e53d19c494c0cec11177679482096d99eef4c48f05e50cf1546220228f11089022c48584f8a5258c374c74b132765f15c8e96d8ba324b628796bdabe11532602158e14"], 0x2fd}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="020a000007000000000000000000de0005001a0000000100041727fbb0fde70100000001040000534f8200000000ffffac1414b206000102c3abe8fbcc006c22dc1cff9ae063af3ccf75ceb4c385c8e8a8446e7549691b66091717d16f6e00a58486aef2ad7ce006651e61f39a451eee4994afc820d96bacc0bcc36aba008178e7bd238b12050000005c9b70e8cc158afd1f4349dbccde21f65dd90ca9a01c49198aa145db4a4882600cab228c54cf90e89c0f297574a6bbab11ba965d529bfacca815bda123ab0c9a200d2dcac2d4ca6f1ffffccf90327c3b678e5c710f44c2a96b792eed0000246abda8c91c5deda42cca14ee7902d0e7a1eab07c98df58f46ceb66f8873e03a2e61f98646be40f3c763fdc1f803d395935cc407c00fbeed5337fea6142382af3e164815457ac87ac49204a50a87183edd640695254ade7414b453088ca3c0a3e3280d5383c70a8ff006dbe6234f0c9ea094e4194d968632a0bec216fe4a712b011463b091a8b8ff5c27bc031954d25c006000000000000035dbc99ced8ccb5d6e2e39df34d95e02d22928ee0ccd2e26044e8b00000d90f86571f34c57be14e6c833e402cd0b50ce179fca6c107384e0e6718d75875fa4baeb624b97c54c336abb2a0588b97ca8a0f6d"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

09:59:42 executing program 1:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37)
unlink(&(0x7f0000000080)='./file0\x00')
clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r1)
mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x23)
creat(&(0x7f0000000040)='./file0\x00', 0x0)

[  309.109236][   T26] audit: type=1326 audit(1586685582.575:21): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10244 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
[  309.266639][T10251] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  309.275582][T10251] FAT-fs (loop5): Filesystem has been set read-only
[  309.283886][T10251] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
09:59:42 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

09:59:42 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000540)=0x2, 0x2}, {&(0x7f0000000580)=0x2, 0x1}, {0x0, 0x2}, {0x0}, {&(0x7f00000006c0)=0x1, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd, 0x1f, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

09:59:42 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x2fd}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

09:59:42 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000540)=0x2, 0x2}, {&(0x7f0000000580)=0x2, 0x1}, {0x0, 0x2}, {0x0}, {&(0x7f00000006c0)=0x1, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd, 0x1f, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

09:59:43 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

09:59:43 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

09:59:43 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802000000000000000000000105000600200000000a000000000000000b4700e50000070000001f00f6ffffe4002500000000000002000100000000d62d09090be70416e518590744d65fefbe000000020000627c05000500000000000a00000000731f65000000ff170000000000f692b9a7008807a4cbadbed302003bca79246c1056b3501dc379ed065b97a1544b0fa16a9687f0ee7b40e6e64b592a34a024ef4bb76dd1bae477abc98201017e1a0675923bf5f0fb50fcd75c2e3ebb4f42c5ddfd05f4ccc3c3a9d8a1f2b593a071f1aa6ea95540925a5cbc44df705eecd4d0a7ecd857c9ad15061c6c78dd8eac2e454f28d8eb632aba7e5fbec94fe1246da56cf57bc16c31cb45aae93b3d2c53de18be5339713d719b99391ee16f11eaa6f728604e7e9bdc3e06d580faf09122035c1fdd0be8d0d233365a6621e783ff00000037b53a8823df241f55cac763cadf24ba329af721c0b3a76d8bbdb57e62cd430700b1e530fd5e1c9b3f1fe15e0d0100000000000000010009ae55813d3151f252b5ca7ee6a1ca791c6e5e6c4d21134108cd1204b21c1fbbbcf78d63283eed89e87c77d9199ba59b1bba40dba8eae720b424df4285162545f52fe5ddfd762659d41dfb2a508695e6bc6585f969d92c6c4e2d9439342a4acdd851af4ea0abddc23680d66bc45e463aad9ae9d6514280728d466b26ff717bf54e2e9d1dc6473d465bfc40c4994f5e51c20ae5b2a740f9d06747211864bd4d1958971a095541fc8d2f2e7ab043aaf604e4dae1b3a3a160b2f0de48ff76c2c27618d5dbca82e8970a2a64762bc6b3acad8c4f1a606cad68c8698fe8e2ce141af48a62be57b485bcd108099ffba77e387c9eeef93ce753146475a23d8cde6dc269f0f11b730334531b30a9e9b5baf2bed6d8cbc82136a1f065b6ac46d3591aa5c6498cd376d9540d3194d2c725eca5e53d19c494c0cec11177679482096d99eef4c48f05e50cf1546220228f11089022c48584f8a5258c374c74b132765f15c8e96d8ba324b628796bdabe11532602158e14b9"], 0x2fe}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

09:59:43 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000540)=0x2, 0x2}, {&(0x7f0000000580)=0x2, 0x1}, {0x0, 0x2}, {0x0}, {&(0x7f00000006c0)=0x1, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd, 0x1f, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

[  309.841609][T10244] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
09:59:43 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000540)=0x2, 0x2}, {&(0x7f0000000580)=0x2, 0x1}, {0x0, 0x2}, {0x0}, {&(0x7f00000006c0)=0x1, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd, 0x1f, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

09:59:43 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

09:59:43 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802000000000000000000000105000600200000000a000000000000000b4700e50000070000001f00f6ffffe4002500000000000002000100000000d62d09090be70416e518590744d65fefbe000000020000627c05000500000000000a00000000731f65000000ff170000000000f692b9a7008807a4cbadbed302003bca79246c1056b3501dc379ed065b97a1544b0fa16a9687f0ee7b40e6e64b592a34a024ef4bb76dd1bae477abc98201017e1a0675923bf5f0fb50fcd75c2e3ebb4f42c5ddfd05f4ccc3c3a9d8a1f2b593a071f1aa6ea95540925a5cbc44df705eecd4d0a7ecd857c9ad15061c6c78dd8eac2e454f28d8eb632aba7e5fbec94fe1246da56cf57bc16c31cb45aae93b3d2c53de18be5339713d719b99391ee16f11eaa6f728604e7e9bdc3e06d580faf09122035c1fdd0be8d0d233365a6621e783ff00000037b53a8823df241f55cac763cadf24ba329af721c0b3a76d8bbdb57e62cd430700b1e530fd5e1c9b3f1fe15e0d0100000000000000010009ae55813d3151f252b5ca7ee6a1ca791c6e5e6c4d21134108cd1204b21c1fbbbcf78d63283eed89e87c77d9199ba59b1bba40dba8eae720b424df4285162545f52fe5ddfd762659d41dfb2a508695e6bc6585f969d92c6c4e2d9439342a4acdd851af4ea0abddc23680d66bc45e463aad9ae9d6514280728d466b26ff717bf54e2e9d1dc6473d465bfc40c4994f5e51c20ae5b2a740f9d06747211864bd4d1958971a095541fc8d2f2e7ab043aaf604e4dae1b3a3a160b2f0de48ff76c2c27618d5dbca82e8970a2a64762bc6b3acad8c4f1a606cad68c8698fe8e2ce141af48a62be57b485bcd108099ffba77e387c9eeef93ce753146475a23d8cde6dc269f0f11b730334531b30a9e9b5baf2bed6d8cbc82136a1f065b6ac46d3591aa5c6498cd376d9540d3194d2c725eca5e53d19c494c0cec11177679482096d99eef4c48f05e50cf1546220228f11089022c48584f8a5258c374c74b132765f15c8e96d8ba324b628796bdabe11532602158e14b9"], 0x2fe}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

[  310.090885][   T26] audit: type=1326 audit(1586685583.555:22): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10292 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
[  310.285828][T10305] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  310.294882][T10305] FAT-fs (loop5): Filesystem has been set read-only
[  310.303405][T10305] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  310.311891][T10305] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  310.321484][T10305] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
09:59:44 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0)
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000540)=0x2, 0x2}, {&(0x7f0000000580)=0x2, 0x1}, {0x0, 0x2}, {0x0}, {&(0x7f00000006c0)=0x1, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd, 0x1f, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

09:59:44 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

09:59:44 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x2fe}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="020a000007000000000000000000de0005001a0000000100041727fbb0fde70100000001040000534f8200000000ffffac1414b206000102c3abe8fbcc006c22dc1cff9ae063af3ccf75ceb4c385c8e8a8446e7549691b66091717d16f6e00a58486aef2ad7ce006651e61f39a451eee4994afc820d96bacc0bcc36aba008178e7bd238b12050000005c9b70e8cc158afd1f4349dbccde21f65dd90ca9a01c49198aa145db4a4882600cab228c54cf90e89c0f297574a6bbab11ba965d529bfacca815bda123ab0c9a200d2dcac2d4ca6f1ffffccf90327c3b678e5c710f44c2a96b792eed0000246abda8c91c5deda42cca14ee7902d0e7a1eab07c98df58f46ceb66f8873e03a2e61f98646be40f3c763fdc1f803d395935cc407c00fbeed5337fea6142382af3e164815457ac87ac49204a50a87183edd640695254ade7414b453088ca3c0a3e3280d5383c70a8ff006dbe6234f0c9ea094e4194d968632a0bec216fe4a712b011463b091a8b8ff5c27bc031954d25c006000000000000035dbc99ced8ccb5d6e2e39df34d95e02d22928ee0ccd2e26044e8b00000d90f86571f34c57be14e6c833e402cd0b50ce179fca6c107384e0e6718d75875fa4baeb624b97c54c336abb2a0588b97ca8a0f6d"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

09:59:44 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

09:59:44 executing program 1:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37)
unlink(&(0x7f0000000080)='./file0\x00')
clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r1)
mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x23)
creat(&(0x7f0000000040)='./file0\x00', 0x0)

09:59:44 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0)
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000540)=0x2, 0x2}, {&(0x7f0000000580)=0x2, 0x1}, {0x0, 0x2}, {0x0}, {&(0x7f00000006c0)=0x1, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd, 0x1f, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

09:59:44 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

09:59:44 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

[  310.832955][T10292] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
09:59:44 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

09:59:44 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0)
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000540)=0x2, 0x2}, {&(0x7f0000000580)=0x2, 0x1}, {0x0, 0x2}, {0x0}, {&(0x7f00000006c0)=0x1, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd, 0x1f, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

09:59:44 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

[  311.180038][   T26] audit: type=1326 audit(1586685584.645:23): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10346 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
09:59:44 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(0x0, 0xd, 0x0, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

09:59:44 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

[  311.330638][T10360] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  311.341857][T10360] FAT-fs (loop5): Filesystem has been set read-only
[  311.350710][T10360] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  311.360095][T10360] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  311.369379][T10360] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
09:59:45 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

09:59:45 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

09:59:45 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

[  311.889557][T10346] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
09:59:47 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000640)='dctcp\x00', 0x6)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080))
syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='nfs,uni_xlate=', @ANYBLOB])
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='nfs,u', @ANYRESHEX, @ANYBLOB=',nonumta'])
syslog(0x0, 0x0, 0x0)
write(r0, &(0x7f00000001c0)="ee", 0x1)

09:59:47 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

09:59:47 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

09:59:47 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

09:59:47 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  313.847538][   T26] audit: type=1326 audit(1586685587.315:24): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10385 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
09:59:47 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

[  314.003080][T10405] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  314.011877][T10405] FAT-fs (loop5): Filesystem has been set read-only
[  314.019881][T10405] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  314.029221][T10405] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  314.040312][T10405] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  314.076070][T10402] FAT-fs (loop1): bogus number of reserved sectors
[  314.128210][T10402] FAT-fs (loop1): Can't find a valid FAT filesystem
09:59:47 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

[  314.603928][T10385] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
09:59:54 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(0x0, 0xd, 0x0, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

09:59:54 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

09:59:54 executing program 1:

09:59:54 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

09:59:54 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

09:59:54 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

09:59:54 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

09:59:54 executing program 1:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
r1 = syz_open_dev$vivid(&(0x7f0000000100)='/dev/video#\x00', 0x1, 0x2)
ioctl$VIDIOC_DQEVENT(r1, 0x80885659, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x33)

09:59:54 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

[  321.279886][   T26] audit: type=1326 audit(1586685594.746:25): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10431 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
[  321.439288][T10451] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  321.448152][T10451] FAT-fs (loop5): Filesystem has been set read-only
[  321.458117][T10451] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  321.468072][T10451] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  321.477057][T10451] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
09:59:55 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

09:59:55 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

09:59:55 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1e, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000240)="450f29f566b89d000f00d0c481a1ec41d466ba4200b84d000000ef430f792e2e420f01c1b988090000b800300000ba000000000f30650fc75e19c744240003000000c7442402c9a322a2c7442406000000000f011c24b9f8020000b8d1000000ba000000000f30", 0x67}], 0x1, 0x0, 0x0, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001000)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd, 0x6, 0x0, 0x0, 0x0)

[  321.848668][T10467] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  321.962002][T10431] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
10:00:03 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(0x0, 0xd, 0x0, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:00:03 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

10:00:03 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[]}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

10:00:03 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:00:03 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:00:03 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1e, 0x0, 0x0, 0x0)
ioctl$KVM_PPC_GET_SMMU_INFO(0xffffffffffffffff, 0x8250aea6, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000})
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x200000000011, 0xffffffffffffffff, 0x0)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000240)="450f29f566b89d000f00d0c481a1ec41d466ba4200b84d000000ef430f792e2e420f01c1b988090000b800300000ba000000000f30650fc75e19c744240003000000c7442402c9a322a2c7442406000000000f011c24b9f8020000b8d1000000ba000000000f30", 0x67}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:00:03 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

[  330.146972][   T26] audit: type=1326 audit(1586685603.617:26): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10483 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:00:03 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

10:00:03 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[]}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

[  330.563601][T10507] kvm: emulating exchange as write
10:00:04 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="00068a7dd8a16795e08348c14dadc3cae622450fbe7dea329b3f475919d59b95e0bfc6b372148ca894a9a1a23e220ad9d3513f2b4f06b405381bf8c7784a744eaf295764d3c9f91d5fe01d83d1347d0000000000000000000000000000000000000000000000000000e5a329208155a5c29a9c62db109533d31bc1e2d34025955e171cfba60ed3b592dd0cf8bba87a338b4ae0357c55ce0eacb7d930f586549418d4447c549b750049619549756f76d6949ceed4fd74c7870c9b35c2df6672edc450cce030618925aa1f31da9d6554900606ae1f4352090a4ce52a92a8e6fb9b6168eab610eec77ba30494bb059a5f2a8c06166611b5ea2eb5cfbe9f6c6ca462deef6e68969102babbf9a5926796beac"], 0x55)
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:00:04 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

10:00:04 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802000000000000000000000105000600200000000a000000000000000b4700e50000070000001f00f6ffffe4002500000000000002000100000000d62d09090be70416e518590744d65fefbe000000020000627c05000500000000000a00000000731f65000000ff170000000000f692b9a7008807a4cbadbed302003bca79246c1056b3501dc379ed065b97a1544b0fa16a9687f0ee7b40e6e64b592a34a024ef4bb76dd1bae477abc98201017e1a0675923bf5f0fb50fcd75c2e3ebb4f42c5ddfd05f4ccc3c3a9d8a1f2b593a071f1aa6ea95540925a5cbc44df705eecd4d0a7ecd857c9ad15061c6c78dd8eac2e454f28d8eb632aba7e5fbec94fe1246da56cf57bc16c31cb45aae93b3d2c53de18be5339713d719b99391ee16f11eaa6f728604e7e9bdc3e06d580faf09122035c1fdd0be8d0d233365a6621e783ff00000037b53a8823df241f55cac763cadf24ba329af721c0b3a76d8bbdb57e62cd430700b1e530fd5e1c9b3f1fe15e0d0100000000000000010009ae55813d3151f252b5ca7ee6a1ca791c6e5e6c4d21134108cd1204b21c1fbbbcf78d63283eed89e87c77d9199ba59b1bba40dba8eae720b424df4285162545f52fe5ddfd762659d41dfb2a508695e6bc6585f969d92c6c4e2d9439342a4acdd851af4ea0abddc23680d66bc45e463aad9ae9d6514280728d466b26ff717bf54e2e9d1dc6473d465bfc40c4994f5e51c20ae5b2a740f9d06747211864bd4d1958971a095541fc8d2f2e7ab043aaf604e4dae1b3a3a160b2f0de48ff76c2c27618d5dbca82e8970a2a64762bc6b3acad8c4f1a606cad68c8698fe8e2ce141af48a62be57b485bcd108099ffba77e387c9eeef93ce753146475a23d8cde6dc269f0f11b730334531b30a9e9b5baf2bed6d8cbc82136a1f065b6ac46d3591aa5c6498cd376d9540d3194d2c725eca5e53d19c494c0cec11177679482096d99eef4c48f05e50cf1546220228f11089022c48584f8a5258c374c74b132765f15c8e96d8ba324b628796bdabe11532602158e14b9fa"], 0x80}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[]}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

[  331.164245][   T26] audit: type=1326 audit(1586685604.637:27): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10519 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:00:13 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000540)=0x2, 0x2}, {&(0x7f0000000580)=0x2, 0x1}, {0x0, 0x2}, {0x0}, {&(0x7f00000006c0)=0x1, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd, 0x1e, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:00:13 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:00:13 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1e, 0x0, 0x0, 0x0)
ioctl$KVM_PPC_GET_SMMU_INFO(0xffffffffffffffff, 0x8250aea6, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000})
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x200000000011, 0xffffffffffffffff, 0x0)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000240)="450f29f566b89d000f00d0c481a1ec41d466ba4200b84d000000ef430f792e2e420f01c1b988090000b800300000ba000000000f30650fc75e19c744240003000000c7442402c9a322a2c7442406000000000f011c24b9f8020000b8d1000000ba000000000f30", 0x67}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:00:13 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

10:00:13 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB]}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

10:00:13 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:00:13 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(0xffffffffffffffff, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

10:00:13 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802000000000000000000000105000600200000000a000000000000000b4700e50000070000001f00f6ffffe4002500000000000002000100000000d62d09090be70416e518590744d65fefbe000000020000627c05000500000000000a00000000731f65000000ff170000000000f692b9a7008807a4cbadbed302003bca79246c1056b3501dc379ed065b97a1544b0fa16a9687f0ee7b40e6e64b592a34a024ef4bb76dd1bae477abc98201017e1a0675923bf5f0fb50fcd75c2e3ebb4f42c5ddfd05f4ccc3c3a9d8a1f2b593a071f1aa6ea95540925a5cbc44df705eecd4d0a7ecd857c9ad15061c6c78dd8eac2e454f28d8eb632aba7e5fbec94fe1246da56cf57bc16c31cb45aae93b3d2c53de18be5339713d719b99391ee16f11eaa6f728604e7e9bdc3e06d580faf09122035c1fdd0be8d0d233365a6621e783ff00000037b53a8823df241f55cac763cadf24ba329af721c0b3a76d8bbdb57e62cd430700b1e530fd5e1c9b3f1fe15e0d0100000000000000010009ae55813d3151f252b5ca7ee6a1ca791c6e5e6c4d21134108cd1204b21c1fbbbcf78d63283eed89e87c77d9199ba59b1bba40dba8eae720b424df4285162545f52fe5ddfd762659d41dfb2a508695e6bc6585f969d92c6c4e2d9439342a4acdd851af4ea0abddc23680d66bc45e463aad9ae9d6514280728d466b26ff717bf54e2e9d1dc6473d465bfc40c4994f5e51c20ae5b2a740f9d06747211864bd4d1958971a095541fc8d2f2e7ab043aaf604e4dae1b3a3a160b2f0de48ff76c2c27618d5dbca82e8970a2a64762bc6b3acad8c4f1a606cad68c8698fe8e2ce141af48a62be57b485bcd108099ffba77e387c9eeef93ce753146475a23d8cde6dc269f0f11b730334531b30a9e9b5baf2bed6d8cbc82136a1f065b6ac46d3591aa5c6498cd376d9540d3194d2c725eca5e53d19c494c0cec11177679482096d99eef4c48f05e50cf1546220228f11089022c48584f8a5258c374c74b132765f15c8e96d8ba324b628796bdabe11532602158e14b9fa"], 0x80}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB]}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

[  339.975511][   T26] audit: type=1326 audit(1586685613.448:28): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10544 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:00:13 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000540)=0x2, 0x2}, {&(0x7f0000000580)=0x2, 0x1}, {0x0, 0x2}, {0x0}, {&(0x7f00000006c0)=0x1, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd, 0x1d, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:00:13 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB]}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

10:00:14 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000540)=0x2, 0x2}, {&(0x7f0000000580)=0x2, 0x1}, {0x0, 0x2}, {0x0}, {&(0x7f00000006c0)=0x1, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd, 0x1c, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:00:14 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:00:14 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:00:14 executing program 1:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$FUSE_DIRENTPLUS(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="c8"], 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0)

10:00:14 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="020a000007000000000000000000de0005001a0000000100041727fbb0fde70100000001040000534f8200000000ffffac1414b206000102c3abe8fbcc006c22dc1cff9ae063af3ccf75ceb4c385c8e8a8446e7549691b66091717d16f6e00a58486aef2ad7ce006651e61f39a451eee4994afc820d96bacc0bcc36aba008178e7bd238b12050000005c9b70e8cc158afd1f4349dbccde21f65dd90ca9a01c49198aa145db4a4882600cab228c54cf90e89c0f297574a6bbab11ba965d529bfacca815bda123ab0c9a200d2dcac2d4ca6f1ffffccf90327c3b678e5c710f44c2a96b792eed0000246a"], 0xe9}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

10:00:14 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000540)=0x2, 0x2}, {&(0x7f0000000580)=0x2, 0x1}, {0x0, 0x2}, {0x0}, {&(0x7f00000006c0)=0x1, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd, 0x1b, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:00:14 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(0xffffffffffffffff, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

[  340.990062][   T26] audit: type=1326 audit(1586685614.468:29): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10586 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:00:14 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="020a000007000000000000000000de0005001a0000000100041727fbb0fde70100000001040000534f8200000000ffffac1414b206000102c3abe8fbcc006c22dc1cff9ae063af3ccf75ceb4c385c8e8a8446e7549691b66091717d16f6e00a58486aef2ad7ce006651e61f39a451eee4994afc820d96bacc0bcc36aba008178e7bd238b12050000005c9b70e8cc158afd1f4349dbccde21f65dd90ca9a01c49198aa145db4a4882600cab228c54cf90e89c0f297574a6bbab11ba965d529bfacca815bda123ab0c9a200d2dcac2d4ca6f1ffffccf90327c3b678e5c710f44c2a96b792eed0000246a"], 0xe9}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

10:00:14 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000540)=0x2, 0x2}, {&(0x7f0000000580)=0x2, 0x1}, {0x0, 0x2}, {0x0}, {&(0x7f00000006c0)=0x1, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd, 0x1a, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:00:14 executing program 1:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00')
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492bd3aa3d41fd", 0x3e}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r0, 0x0, 0x0)

10:00:14 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802000000000000000000000105000600200000000a000000000000000b4700e50000070000001f00f6ffffe4002500000000000002000100000000d62d09090be70416e518590744d65fefbe000000020000627c05000500000000000a00000000731f65000000ff170000000000f692b9a7008807a4cbadbed302003bca79246c1056b3501dc379ed065b97a1544b0fa16a9687f0ee7b40e6e64b592a34a024ef4bb76dd1bae477abc98201017e1a0675923bf5f0fb50fcd75c2e3ebb4f42c5ddfd05f4ccc3c3a9d8a1f2b593a071f1aa6ea95540925a5cbc44df705eecd4d0a7ecd857c9ad15061c6c78dd8eac2e454f28d8eb632aba7e5fbec94fe1246da56cf57bc16c31cb45aae93b3d2c53de18be5339713d719b99391ee16f11eaa6f728604e7e9bdc3e06d580faf09122035c1fdd0be8d0d233365a6621e783ff00000037b53a8823df241f55cac763cadf24ba329af721c0b3a76d8bbdb57e62cd430700b1e530fd5e1c9b3f1fe15e0d0100000000000000010009ae55813d3151f252b5ca7ee6a1ca791c6e5e6c4d21134108cd1204b21c1fbbbcf78d63283eed89e87c77d9199ba59b1bba40dba8eae720b424df4285162545f52fe5ddfd762659d41dfb2a508695e6bc6585f969d92c6c4e2d9439342a4acdd851af4ea0abddc23680d66bc45e463aad9ae9d6514280728d466b26ff717bf54e2e9d1dc6473d465bfc40c4994f5e51c20ae5b2a740f9d06747211864bd4d1958971a095541fc8d2f2e7ab043aaf604e4dae1b3a3a160b2f0de48ff76c2c27618d5dbca82e8970a2a64762bc6b3acad8c4f1a606cad68c8698fe8e2ce141af48a62be57b485bcd108099ffba77e387c9eeef93ce753146475a23d8cde6dc269f0f11b730334531b30a9e9b5baf2bed6d8cbc82136a1f065b6ac46d3591aa5c6498cd376d9540d3194d2c725eca5e53d19c494c0cec11177679482096d99eef4c48f05e50cf1546220228f11089022c48584f8a5258c374c74b132765f15c8e96d8ba324b628796bdabe11532602158e14b9fa"], 0x80}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="020a000007000000000000000000de0005001a0000000100041727fbb0fde70100000001040000534f8200000000ffffac1414b206000102c3abe8fbcc006c22dc1cff9ae063af3ccf75ceb4c385c8e8a8446e7549691b66091717d16f6e00a58486aef2ad7ce006651e61f39a451eee4994afc820d96bacc0bcc36aba008178e7bd238b12050000005c9b70e8cc158afd1f4349dbccde21f65dd90ca9a01c49198aa145db4a4882600cab228c54cf90e89c0f297574a6bbab11ba965d529bfacca815bda123ab0c9a200d2dcac2d4ca6f1ffffccf90327c3b678e5c710f44c2a96b792eed0000246a"], 0xe9}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

10:00:14 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000540)=0x2, 0x2}, {&(0x7f0000000580)=0x2, 0x1}, {0x0, 0x2}, {0x0}, {&(0x7f00000006c0)=0x1, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd, 0x19, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:00:14 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(0xffffffffffffffff, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

10:00:15 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:00:15 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x15d}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

10:00:15 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:00:15 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000540)=0x2, 0x2}, {&(0x7f0000000580)=0x2, 0x1}, {0x0, 0x2}, {0x0}, {&(0x7f00000006c0)=0x1, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd, 0x18, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:00:15 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000540)=0x2, 0x2}, {&(0x7f0000000580)=0x2, 0x1}, {0x0, 0x2}, {0x0}, {&(0x7f00000006c0)=0x1, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd, 0x17, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:00:15 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, 0x0, 0x0)

[  341.889436][   T26] audit: type=1326 audit(1586685615.368:30): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10644 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:00:15 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000540)=0x2, 0x2}, {&(0x7f0000000580)=0x2, 0x1}, {0x0, 0x2}, {0x0}, {&(0x7f00000006c0)=0x1, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd, 0x16, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:00:15 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x15d}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

10:00:17 executing program 1:

10:00:17 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x15d}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

10:00:17 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000540)=0x2, 0x2}, {&(0x7f0000000580)=0x2, 0x1}, {0x0, 0x2}, {0x0}, {&(0x7f00000006c0)=0x1, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd, 0x15, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:00:17 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, 0x0, 0x0)

10:00:17 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:00:17 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:00:17 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000540)=0x2, 0x2}, {&(0x7f0000000580)=0x2, 0x1}, {0x0, 0x2}, {0x0}, {&(0x7f00000006c0)=0x1, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd, 0x14, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:00:18 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x197}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

[  344.533185][   T26] audit: type=1326 audit(1586685618.008:31): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10676 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:00:18 executing program 1:

10:00:18 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, 0x0, 0x0)

10:00:18 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000540)=0x2, 0x2}, {&(0x7f0000000580)=0x2, 0x1}, {0x0, 0x2}, {0x0}, {&(0x7f00000006c0)=0x1, 0x1}, {0x0}, {0x0}, {0x0}], 0xd, 0x13, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:00:18 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x197}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

10:00:18 executing program 1:

10:00:18 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000540)=0x2, 0x2}, {&(0x7f0000000580)=0x2, 0x1}, {0x0, 0x2}, {0x0}, {&(0x7f00000006c0)=0x1, 0x1}, {0x0}, {0x0}], 0xd, 0x12, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:00:18 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:00:18 executing program 1:

10:00:18 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x197}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

10:00:18 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="00068a7dd8a16795e08348c14dadc3cae622450fbe7dea329b3f475919d59b95e0bfc6b372148ca894a9a1a23e220ad9d3513f2b4f06b405381bf8c7784a744eaf295764d3c9f91d5fe01d83d1347d0000000000000000000000000000000000000000000000000000e5a329208155a5c29a9c62db109533d31bc1e2d34025955e171cfba60ed3b592dd0cf8bba87a338b4ae0357c55ce0eacb7d930f586549418d4447c549b750049619549756f76d6949ceed4fd74c7870c9b35c2df6672edc450cce030618925aa1f31da9d6554900606ae1f4352090a4ce52a92a8e6fb9b6168eab610eec77ba30494bb059a5f2a8c06166611b5ea2eb5cfbe9f6c6ca462deef6e68969102babbf9a5926796beac"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:00:18 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}], 0x1)

10:00:18 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000540)=0x2, 0x2}, {&(0x7f0000000580)=0x2, 0x1}, {0x0, 0x2}, {0x0}, {&(0x7f00000006c0)=0x1, 0x1}, {0x0}], 0xd, 0x11, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:00:18 executing program 1:

10:00:18 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="020a000007000000000000000000de0005001a0000000100041727fbb0fde70100000001040000534f8200000000ffffac1414b206000102c3abe8fbcc006c22dc1cff9ae063af3ccf75ceb4c385c8e8a8446e7549691b66091717d16f6e00a58486aef2ad7ce006651e61f39a451eee4994afc820d96bacc0bcc36aba008178e7bd238b12050000005c9b70e8cc158afd1f4349dbccde21f65dd90ca9a01c49198aa145db4a4882600cab228c54cf90e89c0f297574a6bbab11ba965d529bfacca815bda123ab0c9a200d2dcac2d4ca6f1ffffccf90327c3b678e5c710f44c2a96b792eed0000246abda8c91c5deda42cca14ee7902d0e7a1eab07c98df58f46ceb66f8873e03a2e61f98646be40f3c763fdc1f803d395935cc407c00fbeed5337fea6142382af3e164815457ac87ac49204a50a87183edd640695254ade7414b453088ca3c0a3e3280d5383c70a8ff006dbe6234f0c9ea094e4194d968632a0bec216fe4a712b011463b091a8b8ff5c27bc031954d25c006000000000000035dbc99ced8ccb5d6e2e39df34d95e02d22928ee0ccd2e26044e8b00000d90f86571f34c57be14e6c833e402cd0b50ce179fca6c1"], 0x1b4}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

10:00:18 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000540)=0x2, 0x2}, {&(0x7f0000000580)=0x2, 0x1}, {0x0, 0x2}, {0x0}, {&(0x7f00000006c0)=0x1, 0x1}], 0xd, 0x10, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:00:18 executing program 1:

10:00:19 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802000000000000000000000105000600200000000a000000000000000b4700e50000070000001f00f6ffffe4002500000000000002000100000000d62d09090be70416e518590744d65fefbe000000020000627c05000500000000000a00000000731f65000000ff170000000000f692b9a7008807a4cbadbed302003bca79246c1056b3501dc379ed065b97a1544b0fa16a9687f0ee7b40e6e64b592a34a024ef4bb76dd1bae477abc98201017e1a0675923bf5f0fb50fcd75c2e3ebb4f42c5ddfd05f4ccc3c3a9d8a1f2b593a071f1aa6ea95540925a5cbc44df705eecd4d0a7ecd857c9ad15061c6c78dd8eac2e454f28d8eb632aba7e5fbec94fe1246da56cf57bc16c31cb45aae93b3d2c53de18be5339713d719b99391ee16f11eaa6f728604e7e9bdc3e06d580faf09122035c1fdd0be8d0d233365a6621e783ff00000037b53a8823df241f55cac763cadf24ba329af721c0b3a76d8bbdb57e62cd430700b1e530fd5e1c9b3f1fe15e0d0100000000000000010009ae55813d3151f252b5ca7ee6a1ca791c6e5e6c4d21134108cd1204b21c1fbbbcf78d63283eed89e87c77d9199ba59b1bba40dba8eae720b424df4285162545f52fe5ddfd762659d41dfb2a508695e6bc6585f969d92c6c4e2d9439342a4acdd851af4ea0abddc23680d66bc45e463aad9ae9d6514280728d466b26ff717bf54e2e9d1dc6473d465bfc40c4994f5e51c20ae5b2a740f9d06747211864bd4d1958971a095541fc8d2f2e7ab043aaf604e4dae1b3a3a160b2f0de48ff76c2c27618d5dbca82e8970a2a64762bc6b3acad8c4f1a606cad68c8698fe8e2ce141af48a62be57b485bcd108099ffba77e387c9eeef93ce753146475a23d8cde6dc269f0f11b730334531b30a9e9b5baf2bed6d8cbc82136a1f065b6ac46d3591aa5c6498cd376d9540d3194d2c725eca5e53d19c494c0cec11177679482096d99eef4c48f05e50cf1546220228f11089022c48584f8a5258c374c74b132765f15c8e96d8ba324b628796bdabe11532602158e14b9fa"], 0x80}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1b4}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

10:00:19 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}], 0x1)

[  345.559964][   T26] audit: type=1326 audit(1586685619.038:32): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10738 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:00:19 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:00:19 executing program 1:

10:00:19 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000540)=0x2, 0x2}, {&(0x7f0000000580)=0x2, 0x1}, {0x0, 0x2}, {0x0}], 0xd, 0xf, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:00:19 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="00068a7dd8a16795e08348c14dadc3cae622450fbe7dea329b3f475919d59b95e0bfc6b372148ca894a9a1a23e220ad9d3513f2b4f06b405381bf8c7784a744eaf295764d3c9f91d5fe01d83d1347d0000000000000000000000000000000000000000000000000000e5a329208155a5c29a9c62db109533d31bc1e2d34025955e171cfba60ed3b592dd0cf8bba87a338b4ae0357c55ce0eacb7d930f586549418d4447c549b750049619549756f76d6949ceed4fd74c7870c9b35c2df6672edc450cce030618925aa1f31da9d6554900606ae1f4352090a4ce52a92a8e6fb9b6168eab610eec77ba30494bb059a5f2a8c06166611b5ea2eb5cfbe9f6c6ca462deef6e68969102babbf9a5926796beac"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:00:19 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1b4}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

10:00:19 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:00:19 executing program 1:

10:00:19 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000540)=0x2, 0x2}, {&(0x7f0000000580)=0x2, 0x1}, {0x0, 0x2}], 0xd, 0xe, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

[  346.287275][T10748] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  346.295211][T10748] FAT-fs (loop5): Filesystem has been set read-only
10:00:19 executing program 1:

10:00:19 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:00:19 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1c3}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

[  346.492569][   T26] audit: type=1326 audit(1586685619.968:33): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10774 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:00:20 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}], 0x1)

10:00:20 executing program 1:

10:00:20 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000540)=0x2, 0x2}, {&(0x7f0000000580)=0x2, 0x1}], 0xd, 0xd, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:00:20 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:00:20 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="00068a7dd8a16795e08348c14dadc3cae622450fbe7dea329b3f475919d59b95e0bfc6b372148ca894a9a1a23e220ad9d3513f2b4f06b405381bf8c7784a744eaf295764d3c9f91d5fe01d83d1347d0000000000000000000000000000000000000000000000000000e5a329208155a5c29a9c62db109533d31bc1e2d34025955e171cfba60ed3b592dd0cf8bba87a338b4ae0357c55ce0eacb7d930f586549418d4447c549b750049619549756f76d6949ceed4fd74c7870c9b35c2df6672edc450cce030618925aa1f31da9d6554900606ae1f4352090a4ce52a92a8e6fb9b6168eab610eec77ba30494bb059a5f2a8c06166611b5ea2eb5cfbe9f6c6ca462deef6e68969102babbf9a5926796beac"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:00:20 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:00:20 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1c3}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

10:00:20 executing program 1:

10:00:20 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000540)=0x2, 0x2}], 0xd, 0xc, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

[  347.251138][T10785] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  347.259083][T10785] FAT-fs (loop5): Filesystem has been set read-only
10:00:20 executing program 1:

10:00:20 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:00:20 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802000000000000000000000105000600200000000a000000000000000b4700e50000070000001f00f6ffffe4002500000000000002000100000000d62d09090be70416e518590744d65fefbe000000020000627c05000500000000000a00000000731f65000000ff170000000000f692b9a7008807a4cbadbed302003bca79246c1056b3501dc379ed065b97a1544b0fa16a9687f0ee7b40e6e64b592a34a024ef4bb76dd1bae477abc98201017e1a0675923bf5f0fb50fcd75c2e3ebb4f42c5ddfd05f4ccc3c3a9d8a1f2b593a071f1aa6ea95540925a5cbc44df705eecd4d0a7ecd857c9ad15061c6c78dd8eac2e454f28d8eb632aba7e5fbec94fe1246da56cf57bc16c31cb45aae93b3d2c53de18be5339713d719b99391ee16f11eaa6f728604e7e9bdc3e06d580faf09122035c1fdd0be8d0d233365a6621e783ff00000037b53a8823df241f55cac763cadf24ba329af721c0b3a76d8bbdb57e62cd430700b1e530fd5e1c9b3f1fe15e0d0100000000000000010009ae55813d3151f252b5ca7ee6a1ca791c6e5e6c4d21134108cd1204b21c1fbbbcf78d63283eed89e87c77d9199ba59b1bba40dba8eae720b424df4285162545f52fe5ddfd762659d41dfb2a508695e6bc6585f969d92c6c4e2d9439342a4acdd851af4ea0abddc23680d66bc45e463aad9ae9d6514280728d466b26ff717bf54e2e9d1dc6473d465bfc40c4994f5e51c20ae5b2a740f9d06747211864bd4d1958971a095541fc8d2f2e7ab043aaf604e4dae1b3a3a160b2f0de48ff76c2c27618d5dbca82e8970a2a64762bc6b3acad8c4f1a606cad68c8698fe8e2ce141af48a62be57b485bcd108099ffba77e387c9eeef93ce753146475a23d8cde6dc269f0f11b730334531b30a9e9b5baf2bed6d8cbc82136a1f065b6ac46d3591aa5c6498cd376d9540d3194d2c725eca5e53d19c494c0cec11177679482096d99eef4c48f05e50cf1546220228f11089022c48584f8a5258c374c74b132765f15c8e96d8ba324b628796bdabe11532602158e14b9fa"], 0x80}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="020a000007000000000000000000de0005001a0000000100041727fbb0fde70100000001040000534f8200000000ffffac1414b206000102c3abe8fbcc006c22dc1cff9ae063af3ccf75ceb4c385c8e8a8446e7549691b66091717d16f6e00a58486aef2ad7ce006651e61f39a451eee4994afc820d96bacc0bcc36aba008178e7bd238b12050000005c9b70e8cc158afd1f4349dbccde21f65dd90ca9a01c49198aa145db4a4882600cab228c54cf90e89c0f297574a6bbab11ba965d529bfacca815bda123ab0c9a200d2dcac2d4ca6f1ffffccf90327c3b678e5c710f44c2a96b792eed0000246abda8c91c5deda42cca14ee7902d0e7a1eab07c98df58f46ceb66f8873e03a2e61f98646be40f3c763fdc1f803d395935cc407c00fbeed5337fea6142382af3e164815457ac87ac49204a50a87183edd640695254ade7414b453088ca3c0a3e3280d5383c70a8ff006dbe6234f0c9ea094e4194d968632a0bec216fe4a712b011463b091a8b8ff5c27bc031954d25c006000000000000035dbc99ced8ccb5d6e2e39df34d95e02d22928ee0ccd2e26044e8b00000d90f86571f34c57be14e6c833e402cd0b50ce179fca6c107384e0e6718d75875fa4baeb624b9"], 0x1c3}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

10:00:21 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}, {0x0}], 0x2)

10:00:21 executing program 1:

10:00:21 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  347.657162][   T26] audit: type=1326 audit(1586685621.128:34): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10814 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:00:21 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:00:21 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:00:21 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802000000000000000000000105000600200000000a000000000000000b4700e50000070000001f00f6ffffe4002500000000000002000100000000d62d09090be70416e518590744d65fefbe000000020000627c05000500000000000a00000000731f65000000ff170000000000f692b9a7008807a4cbadbed302003bca79246c1056b3501dc379ed065b97a1544b0fa16a9687f0ee7b40e6e64b592a34a024ef4bb76dd1bae477abc98201017e1a0675923bf5f0fb50fcd75c2e3ebb4f42c5ddfd05f4ccc3c3a9d8a1f2b593a071f1aa6ea95540925a5cbc44df705eecd4d0a7ecd857c9ad15061c6c78dd8eac2e454f28d8eb632aba7e5fbec94fe1246da56cf57bc16c31cb45aae93b3d2c53de18be5339713d719b99391ee16f11eaa6f728604e7e9bdc3e06d580faf09122035c1fdd0be8d0d233365a6621e783ff00000037b53a8823df241f55cac763cadf24ba329af721c0b3a76d8bbdb57e62cd430700b1e530fd5e1c9b3f1fe15e0d0100000000000000010009ae55813d3151f252b5ca7ee6a1ca791c6e5e6c4d21134108cd1204b21c1fbbbcf78d63283eed89e87c77d9199ba59b1bba40dba8eae720b424df4285162545f52fe5ddfd762659d41dfb2a508695e6bc6585f969d92c6c4e2d9439342a4acdd851af4ea0abddc23680d66bc45e463aad9ae9d6514280728d466b26ff717bf54e2e9d1dc6473d465bfc40c4994f5e51c20ae5b2a740f9d06747211864bd4d1958971a095541fc8d2f2e7ab043aaf604e4dae1b3a3a160b2f0de48ff76c2c27618d5dbca82e8970a2a64762bc6b3acad8c4f1a606cad68c8698fe8e2ce141af48a62be57b485bcd108099ffba77e387c9eeef93ce753146475a23d8cde6dc269f0f11b730334531b30a9e9b5baf2bed6d8cbc82136a1f065b6ac46d3591aa5c6498cd376d9540d3194d2c725eca5e53d19c494c0cec11177679482096d99eef4c48f05e50cf1546220228f11089022c48584f8a5258c374c74b132765f15c8e96d8ba324b628796bdabe11532602158e14b9fa"], 0x80}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1ca}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

10:00:21 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:00:21 executing program 1:

[  348.661465][   T26] audit: type=1326 audit(1586685622.138:35): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10855 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
[  348.815706][T10863] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  348.824494][T10863] FAT-fs (loop5): Filesystem has been set read-only
[  348.833837][T10863] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  348.843717][T10863] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  348.853124][T10863] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  349.336224][T10855] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
10:00:30 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000540)=0x2, 0x2}], 0xd, 0xc, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:00:30 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1ca}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

10:00:30 executing program 1:

10:00:30 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:00:30 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}, {0x0}], 0x2)

10:00:30 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="00068a7dd8a16795e08348c14dadc3cae622450fbe7dea329b3f475919d59b95e0bfc6b372148ca894a9a1a23e220ad9d3513f2b4f06b405381bf8c7784a744eaf295764d3c9f91d5fe01d83d1347d0000000000000000000000000000000000000000000000000000e5a329208155a5c29a9c62db109533d31bc1e2d34025955e171cfba60ed3b592dd0cf8bba87a338b4ae0357c55ce0eacb7d930f586549418d4447c549b750049619549756f76d6949ceed4fd74c7870c9b35c2df6672edc450cce030618925aa1f31da9d6554900606ae1f4352090a4ce52a92a8e6fb9b6168eab610eec77ba30494bb059a5f2a8c06166611b5ea2eb5cfbe9f6c6ca462deef6e68969102babbf9a5926796beac"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:00:30 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:00:30 executing program 1:

[  357.271440][   T26] audit: type=1326 audit(1586685630.749:36): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10872 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:00:30 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802000000000000000000000105000600200000000a000000000000000b4700e50000070000001f00f6ffffe4002500000000000002000100000000d62d09090be70416e518590744d65fefbe000000020000627c05000500000000000a00000000731f65000000ff170000000000f692b9a7008807a4cbadbed302003bca79246c1056b3501dc379ed065b97a1544b0fa16a9687f0ee7b40e6e64b592a34a024ef4bb76dd1bae477abc98201017e1a0675923bf5f0fb50fcd75c2e3ebb4f42c5ddfd05f4ccc3c3a9d8a1f2b593a071f1aa6ea95540925a5cbc44df705eecd4d0a7ecd857c9ad15061c6c78dd8eac2e454f28d8eb632aba7e5fbec94fe1246da56cf57bc16c31cb45aae93b3d2c53de18be5339713d719b99391ee16f11eaa6f728604e7e9bdc3e06d580faf09122035c1fdd0be8d0d233365a6621e783ff00000037b53a8823df241f55cac763cadf24ba329af721c0b3a76d8bbdb57e62cd430700b1e530fd5e1c9b3f1fe15e0d0100000000000000010009ae55813d3151f252b5ca7ee6a1ca791c6e5e6c4d21134108cd1204b21c1fbbbcf78d63283eed89e87c77d9199ba59b1bba40dba8eae720b424df4285162545f52fe5ddfd762659d41dfb2a508695e6bc6585f969d92c6c4e2d9439342a4acdd851af4ea0abddc23680d66bc45e463aad9ae9d6514280728d466b26ff717bf54e2e9d1dc6473d465bfc40c4994f5e51c20ae5b2a740f9d06747211864bd4d1958971a095541fc8d2f2e7ab043aaf604e4dae1b3a3a160b2f0de48ff76c2c27618d5dbca82e8970a2a64762bc6b3acad8c4f1a606cad68c8698fe8e2ce141af48a62be57b485bcd108099ffba77e387c9eeef93ce753146475a23d8cde6dc269f0f11b730334531b30a9e9b5baf2bed6d8cbc82136a1f065b6ac46d3591aa5c6498cd376d9540d3194d2c725eca5e53d19c494c0cec11177679482096d99eef4c48f05e50cf1546220228f11089022c48584f8a5258c374c74b132765f15c8e96d8ba324b628796bdabe11532602158e14b9fa"], 0x80}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1ca}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

10:00:31 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:00:31 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802000000000000000000000105000600200000000a000000000000000b4700e50000070000001f00f6ffffe4002500000000000002000100000000d62d09090be70416e518590744d65fefbe000000020000627c05000500000000000a00000000731f65000000ff170000000000f692b9a7008807a4cbadbed302003bca79246c1056b3501dc379ed065b97a1544b0fa16a9687f0ee7b40e6e64b592a34a024ef4bb76dd1bae477abc98201017e1a0675923bf5f0fb50fcd75c2e3ebb4f42c5ddfd05f4ccc3c3a9d8a1f2b593a071f1aa6ea95540925a5cbc44df705eecd4d0a7ecd857c9ad15061c6c78dd8eac2e454f28d8eb632aba7e5fbec94fe1246da56cf57bc16c31cb45aae93b3d2c53de18be5339713d719b99391ee16f11eaa6f728604e7e9bdc3e06d580faf09122035c1fdd0be8d0d233365a6621e783ff00000037b53a8823df241f55cac763cadf24ba329af721c0b3a76d8bbdb57e62cd430700b1e530fd5e1c9b3f1fe15e0d0100000000000000010009ae55813d3151f252b5ca7ee6a1ca791c6e5e6c4d21134108cd1204b21c1fbbbcf78d63283eed89e87c77d9199ba59b1bba40dba8eae720b424df4285162545f52fe5ddfd762659d41dfb2a508695e6bc6585f969d92c6c4e2d9439342a4acdd851af4ea0abddc23680d66bc45e463aad9ae9d6514280728d466b26ff717bf54e2e9d1dc6473d465bfc40c4994f5e51c20ae5b2a740f9d06747211864bd4d1958971a095541fc8d2f2e7ab043aaf604e4dae1b3a3a160b2f0de48ff76c2c27618d5dbca82e8970a2a64762bc6b3acad8c4f1a606cad68c8698fe8e2ce141af48a62be57b485bcd108099ffba77e387c9eeef93ce753146475a23d8cde6dc269f0f11b730334531b30a9e9b5baf2bed6d8cbc82136a1f065b6ac46d3591aa5c6498cd376d9540d3194d2c725eca5e53d19c494c0cec11177679482096d99eef4c48f05e50cf1546220228f11089022c48584f8a5258c374c74b132765f15c8e96d8ba324b628796bdabe11532602158e14b9fa"], 0x80}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="020a000007000000000000000000de0005001a0000000100041727fbb0fde70100000001040000534f8200000000ffffac1414b206000102c3abe8fbcc006c22dc1cff9ae063af3ccf75ceb4c385c8e8a8446e7549691b66091717d16f6e00a58486aef2ad7ce006651e61f39a451eee4994afc820d96bacc0bcc36aba008178e7bd238b12050000005c9b70e8cc158afd1f4349dbccde21f65dd90ca9a01c49198aa145db4a4882600cab228c54cf90e89c0f297574a6bbab11ba965d529bfacca815bda123ab0c9a200d2dcac2d4ca6f1ffffccf90327c3b678e5c710f44c2a96b792eed0000246abda8c91c5deda42cca14ee7902d0e7a1eab07c98df58f46ceb66f8873e03a2e61f98646be40f3c763fdc1f803d395935cc407c00fbeed5337fea6142382af3e164815457ac87ac49204a50a87183edd640695254ade7414b453088ca3c0a3e3280d5383c70a8ff006dbe6234f0c9ea094e4194d968632a0bec216fe4a712b011463b091a8b8ff5c27bc031954d25c006000000000000035dbc99ced8ccb5d6e2e39df34d95e02d22928ee0ccd2e26044e8b00000d90f86571f34c57be14e6c833e402cd0b50ce179fca6c107384e0e6718d75875fa4baeb624b97c54c336abb2a0588b97ca"], 0x1ce}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

10:00:31 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000540)=0x2, 0x2}], 0xd, 0xc, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:00:31 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}, {0x0}], 0x2)

10:00:31 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:00:31 executing program 1:

10:00:31 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:00:31 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1ce}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

10:00:31 executing program 1:

[  358.287129][   T26] audit: type=1326 audit(1586685631.759:37): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10914 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
[  358.306426][T10928] ptrace attach of "/root/syz-executor.4"[10926] was attempted by "/root/syz-executor.4"[10928]
10:00:31 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}, 0x1, 0x60000000}, 0x0)

10:00:32 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}, {&(0x7f0000001500)}], 0x2)

[  358.445727][T10933] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  358.454795][T10933] FAT-fs (loop5): Filesystem has been set read-only
[  358.463388][T10933] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
10:00:32 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1ce}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

10:00:32 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000280)={<r0=>0xffffffffffffffff})
mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0)

10:00:32 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802000000000000000000000105000600200000000a000000000000000b4700e50000070000001f00f6ffffe4002500000000000002000100000000d62d09090be70416e518590744d65fefbe000000020000627c05000500000000000a00000000731f65000000ff170000000000f692b9a7008807a4cbadbed302003bca79246c1056b3501dc379ed065b97a1544b0fa16a9687f0ee7b40e6e64b592a34a024ef4bb76dd1bae477abc98201017e1a0675923bf5f0fb50fcd75c2e3ebb4f42c5ddfd05f4ccc3c3a9d8a1f2b593a071f1aa6ea95540925a5cbc44df705eecd4d0a7ecd857c9ad15061c6c78dd8eac2e454f28d8eb632aba7e5fbec94fe1246da56cf57bc16c31cb45aae93b3d2c53de18be5339713d719b99391ee16f11eaa6f728604e7e9bdc3e06d580faf09122035c1fdd0be8d0d233365a6621e783ff00000037b53a8823df241f55cac763cadf24ba329af721c0b3a76d8bbdb57e62cd430700b1e530fd5e1c9b3f1fe15e0d0100000000000000010009ae55813d3151f252b5ca7ee6a1ca791c6e5e6c4d21134108cd1204b21c1fbbbcf78d63283eed89e87c77d9199ba59b1bba40dba8eae720b424df4285162545f52fe5ddfd762659d41dfb2a508695e6bc6585f969d92c6c4e2d9439342a4acdd851af4ea0abddc23680d66bc45e463aad9ae9d6514280728d466b26ff717bf54e2e9d1dc6473d465bfc40c4994f5e51c20ae5b2a740f9d06747211864bd4d1958971a095541fc8d2f2e7ab043aaf604e4dae1b3a3a160b2f0de48ff76c2c27618d5dbca82e8970a2a64762bc6b3acad8c4f1a606cad68c8698fe8e2ce141af48a62be57b485bcd108099ffba77e387c9eeef93ce753146475a23d8cde6dc269f0f11b730334531b30a9e9b5baf2bed6d8cbc82136a1f065b6ac46d3591aa5c6498cd376d9540d3194d2c725eca5e53d19c494c0cec11177679482096d99eef4c48f05e50cf1546220228f11089022c48584f8a5258c374c74b132765f15c8e96d8ba324b628796bdabe11532602158e14b9fa"], 0x80}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1d0}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

[  359.008200][T10914] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
10:00:40 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000540)=0x2, 0x2}, {0x0, 0x1}], 0xd, 0xd, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:00:40 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendfile(r3, r2, 0x0, 0x20000000004)

10:00:40 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}, {&(0x7f0000001500)}], 0x2)

10:00:40 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1d0}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

10:00:40 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:00:40 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  367.367476][T10962] buggy seq_file .next function proc_keys_next did not updated position index
[  367.384035][T10962] selinux_netlink_send: 5 callbacks suppressed
[  367.384051][T10962] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14129 sclass=netlink_route_socket pid=10962 comm=syz-executor.1
[  367.513730][   T26] audit: type=1326 audit(1586685640.990:38): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10959 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:00:41 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:00:41 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="020a000007000000000000000000de0005001a0000000100041727fbb0fde70100000001040000534f8200000000ffffac1414b206000102c3abe8fbcc006c22dc1cff9ae063af3ccf75ceb4c385c8e8a8446e7549691b66091717d16f6e00a58486aef2ad7ce006651e61f39a451eee4994afc820d96bacc0bcc36aba008178e7bd238b12050000005c9b70e8cc158afd1f4349dbccde21f65dd90ca9a01c49198aa145db4a4882600cab228c54cf90e89c0f297574a6bbab11ba965d529bfacca815bda123ab0c9a200d2dcac2d4ca6f1ffffccf90327c3b678e5c710f44c2a96b792eed0000246abda8c91c5deda42cca14ee7902d0e7a1eab07c98df58f46ceb66f8873e03a2e61f98646be40f3c763fdc1f803d395935cc407c00fbeed5337fea6142382af3e164815457ac87ac49204a50a87183edd640695254ade7414b453088ca3c0a3e3280d5383c70a8ff006dbe6234f0c9ea094e4194d968632a0bec216fe4a712b011463b091a8b8ff5c27bc031954d25c006000000000000035dbc99ced8ccb5d6e2e39df34d95e02d22928ee0ccd2e26044e8b00000d90f86571f34c57be14e6c833e402cd0b50ce179fca6c107384e0e6718d75875fa4baeb624b97c54c336abb2a0588b97ca8a0f"], 0x1d0}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

10:00:41 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x3c)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0)
close(0xffffffffffffffff)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x3efd, @loopback, 0x7400}, 0x1c)

[  367.673791][T10981] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  367.682740][T10981] FAT-fs (loop5): Filesystem has been set read-only
[  367.692017][T10981] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  367.701267][T10981] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  367.711066][T10981] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
10:00:41 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb9cca63ab0e31bf86e5c72deb2977afd905af9d5885b9c13971d0c3f158fb3a699398281e0e2a210d09a728ddaeba0b3ee812b7f3cf024fcd98826cfbb9827dea12", 0x82}, {&(0x7f0000001500)}], 0x2)

10:00:41 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802000000000000000000000105000600200000000a000000000000000b4700e50000070000001f00f6ffffe4002500000000000002000100000000d62d09090be70416e518590744d65fefbe000000020000627c05000500000000000a00000000731f65000000ff170000000000f692b9a7008807a4cbadbed302003bca79246c1056b3501dc379ed065b97a1544b0fa16a9687f0ee7b40e6e64b592a34a024ef4bb76dd1bae477abc98201017e1a0675923bf5f0fb50fcd75c2e3ebb4f42c5ddfd05f4ccc3c3a9d8a1f2b593a071f1aa6ea95540925a5cbc44df705eecd4d0a7ecd857c9ad15061c6c78dd8eac2e454f28d8eb632aba7e5fbec94fe1246da56cf57bc16c31cb45aae93b3d2c53de18be5339713d719b99391ee16f11eaa6f728604e7e9bdc3e06d580faf09122035c1fdd0be8d0d233365a6621e783ff00000037b53a8823df241f55cac763cadf24ba329af721c0b3a76d8bbdb57e62cd430700b1e530fd5e1c9b3f1fe15e0d0100000000000000010009ae55813d3151f252b5ca7ee6a1ca791c6e5e6c4d21134108cd1204b21c1fbbbcf78d63283eed89e87c77d9199ba59b1bba40dba8eae720b424df4285162545f52fe5ddfd762659d41dfb2a508695e6bc6585f969d92c6c4e2d9439342a4acdd851af4ea0abddc23680d66bc45e463aad9ae9d6514280728d466b26ff717bf54e2e9d1dc6473d465bfc40c4994f5e51c20ae5b2a740f9d06747211864bd4d1958971a095541fc8d2f2e7ab043aaf604e4dae1b3a3a160b2f0de48ff76c2c27618d5dbca82e8970a2a64762bc6b3acad8c4f1a606cad68c8698fe8e2ce141af48a62be57b485bcd108099ffba77e387c9eeef93ce753146475a23d8cde6dc269f0f11b730334531b30a9e9b5baf2bed6d8cbc82136a1f065b6ac46d3591aa5c6498cd376d9540d3194d2c725eca5e53d19c494c0cec11177679482096d99eef4c48f05e50cf1546220228f11089022c48584f8a5258c374c74b132765f15c8e96d8ba324b628796bdabe11532602158e14b9fa"], 0x80}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x4000144, 0x0)

10:00:41 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x60000000}, 0x0)

[  367.909370][T10994] ptrace attach of "/root/syz-executor.4"[10993] was attempted by "/root/syz-executor.4"[10994]
[  368.156762][T10959] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  371.297247][    T0] NOHZ: local_softirq_pending 08
[  372.585265][    T0] NOHZ: local_softirq_pending 08
10:00:49 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000540)=0x2, 0x2}, {0x0, 0x1}], 0xd, 0xd, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:00:49 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802000000000000000000000105000600200000000a000000000000000b4700e50000070000001f00f6ffffe4002500000000000002000100000000d62d09090be70416e518590744d65fefbe000000020000627c05000500000000000a00000000731f65000000ff170000000000f692b9a7008807a4cbadbed302003bca79246c1056b3501dc379ed065b97a1544b0fa16a9687f0ee7b40e6e64b592a34a024ef4bb76dd1bae477abc98201017e1a0675923bf5f0fb50fcd75c2e3ebb4f42c5ddfd05f4ccc3c3a9d8a1f2b593a071f1aa6ea95540925a5cbc44df705eecd4d0a7ecd857c9ad15061c6c78dd8eac2e454f28d8eb632aba7e5fbec94fe1246da56cf57bc16c31cb45aae93b3d2c53de18be5339713d719b99391ee16f11eaa6f728604e7e9bdc3e06d580faf09122035c1fdd0be8d0d233365a6621e783ff00000037b53a8823df241f55cac763cadf24ba329af721c0b3a76d8bbdb57e62cd430700b1e530fd5e1c9b3f1fe15e0d0100000000000000010009ae55813d3151f252b5ca7ee6a1ca791c6e5e6c4d21134108cd1204b21c1fbbbcf78d63283eed89e87c77d9199ba59b1bba40dba8eae720b424df4285162545f52fe5ddfd762659d41dfb2a508695e6bc6585f969d92c6c4e2d9439342a4acdd851af4ea0abddc23680d66bc45e463aad9ae9d6514280728d466b26ff717bf54e2e9d1dc6473d465bfc40c4994f5e51c20ae5b2a740f9d06747211864bd4d1958971a095541fc8d2f2e7ab043aaf604e4dae1b3a3a160b2f0de48ff76c2c27618d5dbca82e8970a2a64762bc6b3acad8c4f1a606cad68c8698fe8e2ce141af48a62be57b485bcd108099ffba77e387c9eeef93ce753146475a23d8cde6dc269f0f11b730334531b30a9e9b5baf2bed6d8cbc82136a1f065b6ac46d3591aa5c6498cd376d9540d3194d2c725eca5e53d19c494c0cec11177679482096d99eef4c48f05e50cf1546220228f11089022c48584f8a5258c374c74b132765f15c8e96d8ba324b628796bdabe11532602158e14b9fa"], 0x80}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="020a000007000000000000000000de0005001a0000000100041727fbb0fde70100000001040000534f8200000000ffffac1414b206000102c3abe8fbcc006c22dc1cff9ae063af3ccf75ceb4c385c8e8a8446e7549691b66091717d16f6e00a58486aef2ad7ce006651e61f39a451eee4994afc820d96bacc0bcc36aba008178e7bd238b12050000005c9b70e8cc158afd1f4349dbccde21f65dd90ca9a01c49198aa145db4a4882600cab228c54cf90e89c0f297574a6bbab11ba965d529bfacca815bda123ab0c9a200d2dcac2d4ca6f1ffffccf90327c3b678e5c710f44c2a96b792eed0000246abda8c91c5deda42cca14ee7902d0e7a1eab07c98df58f46ceb66f8873e03a2e61f98646be40f3c763fdc1f803d395935cc407c00fbeed5337fea6142382af3e164815457ac87ac49204a50a87183edd640695254ade7414b453088ca3c0a3e3280d5383c70a8ff006dbe6234f0c9ea094e4194d968632a0bec216fe4a712b011463b091a8b8ff5c27bc031954d25c006000000000000035dbc99ced8ccb5d6e2e39df34d95e02d22928ee0ccd2e26044e8b00000d90f86571f34c57be14e6c833e402cd0b50ce179fca6c107384e0e6718d75875fa4baeb624b97c54c336abb2a0588b97ca8a0f6d"], 0x38}}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x4000144, 0x0)

10:00:49 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x60000000}, 0x0)

10:00:49 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:00:49 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000001500)="c2", 0x1}], 0x1)

10:00:49 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:00:49 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:00:50 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x60000000}, 0x0)

[  376.533018][   T26] audit: type=1326 audit(1586685650.010:39): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11017 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:00:50 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:00:50 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="020a000007000000000000000000de0005001a0000000100041727fbb0fde70100000001040000534f8200000000ffffac1414b206000102c3abe8fbcc006c22dc1cff9ae063af3ccf75ceb4c385c8e8a8446e7549691b66091717d16f6e00a58486aef2ad7ce006651e61f39a451eee4994afc820d96bacc0bcc36aba008178e7bd238b12050000005c9b70e8cc158afd1f4349dbccde21f65dd90ca9a01c49198aa145db4a4882600cab228c54cf90e89c0f297574a6bbab11ba965d529bfacca815bda123ab0c9a200d2dcac2d4ca6f1ffffccf90327c3b678e5c710f44c2a96b792eed0000246abda8c91c5deda42cca14ee7902d0e7a1eab07c98df58f46ceb66f8873e03a2e61f98646be40f3c763fdc1f803d395935cc407c00fbeed5337fea6142382af3e164815457ac87ac49204a50a87183edd640695254ade7414b453088ca3c0a3e3280d5383c70a8ff006dbe6234f0c9ea094e4194d968632a0bec216fe4a712b011463b091a8b8ff5c27bc031954d25c006000000000000035dbc99ced8ccb5d6e2e39df34d95e02d22928ee0ccd2e26044e8b00000d90f86571f34c57be14e6c833e402cd0b50ce179fca6c107384e0e6718d75875fa4baeb624b97c54c336abb2a0588b97ca8a0f6d"], 0x38}}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x4000144, 0x0)

[  376.686798][T11038] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  376.695493][T11038] FAT-fs (loop5): Filesystem has been set read-only
[  376.704340][T11038] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  376.714185][T11038] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  376.724355][T11038] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
10:00:50 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x60000000}, 0x0)

10:00:50 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)

[  377.251995][T11017] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
10:00:58 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000540)=0x2, 0x2}, {0x0, 0x1}], 0xd, 0xd, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:00:58 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:00:58 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000001500)="c2", 0x1}], 0x1)

10:00:58 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802000000000000000000000105000600200000000a000000000000000b4700e50000070000001f00f6ffffe4002500000000000002000100000000d62d09090be70416e518590744d65fefbe000000020000627c05000500000000000a00000000731f65000000ff170000000000f692b9a7008807a4cbadbed302003bca79246c1056b3501dc379ed065b97a1544b0fa16a9687f0ee7b40e6e64b592a34a024ef4bb76dd1bae477abc98201017e1a0675923bf5f0fb50fcd75c2e3ebb4f42c5ddfd05f4ccc3c3a9d8a1f2b593a071f1aa6ea95540925a5cbc44df705eecd4d0a7ecd857c9ad15061c6c78dd8eac2e454f28d8eb632aba7e5fbec94fe1246da56cf57bc16c31cb45aae93b3d2c53de18be5339713d719b99391ee16f11eaa6f728604e7e9bdc3e06d580faf09122035c1fdd0be8d0d233365a6621e783ff00000037b53a8823df241f55cac763cadf24ba329af721c0b3a76d8bbdb57e62cd430700b1e530fd5e1c9b3f1fe15e0d0100000000000000010009ae55813d3151f252b5ca7ee6a1ca791c6e5e6c4d21134108cd1204b21c1fbbbcf78d63283eed89e87c77d9199ba59b1bba40dba8eae720b424df4285162545f52fe5ddfd762659d41dfb2a508695e6bc6585f969d92c6c4e2d9439342a4acdd851af4ea0abddc23680d66bc45e463aad9ae9d6514280728d466b26ff717bf54e2e9d1dc6473d465bfc40c4994f5e51c20ae5b2a740f9d06747211864bd4d1958971a095541fc8d2f2e7ab043aaf604e4dae1b3a3a160b2f0de48ff76c2c27618d5dbca82e8970a2a64762bc6b3acad8c4f1a606cad68c8698fe8e2ce141af48a62be57b485bcd108099ffba77e387c9eeef93ce753146475a23d8cde6dc269f0f11b730334531b30a9e9b5baf2bed6d8cbc82136a1f065b6ac46d3591aa5c6498cd376d9540d3194d2c725eca5e53d19c494c0cec11177679482096d99eef4c48f05e50cf1546220228f11089022c48584f8a5258c374c74b132765f15c8e96d8ba324b628796bdabe11532602158e14b9fa"], 0x80}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)

10:00:58 executing program 1:
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x60000000}, 0x0)

10:00:58 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:00:58 executing program 1:
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x60000000}, 0x0)

10:00:58 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:00:58 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  385.413418][   T26] audit: type=1326 audit(1586685658.891:40): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11065 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:00:58 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)

10:00:59 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  385.567950][T11093] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  385.576773][T11093] FAT-fs (loop5): Filesystem has been set read-only
[  385.585928][T11093] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  385.595499][T11093] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  385.605008][T11093] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
10:00:59 executing program 1:
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x60000000}, 0x0)

[  386.115520][T11065] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  391.775934][    T0] NOHZ: local_softirq_pending 08
[  393.061641][    T0] NOHZ: local_softirq_pending 08
10:01:07 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000540)=0x2, 0x2}, {&(0x7f0000000580), 0x1}], 0xd, 0xd, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:01:07 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:01:07 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000001500)="c2", 0x1}], 0x1)

10:01:07 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1)
ioctl$USBDEVFS_CLEAR_HALT(r0, 0x8108551b, 0x0)

10:01:07 executing program 1:
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x60000000}, 0x0)

10:01:07 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:01:07 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:01:07 executing program 1:
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x60000000}, 0x0)

[  394.307295][   T26] audit: type=1326 audit(1586685667.792:41): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11117 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:01:07 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000540)=0x2, 0x2}, {&(0x7f0000000580), 0x1}], 0xd, 0xd, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:01:07 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000), 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  394.461823][T11138] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  394.470496][T11138] FAT-fs (loop5): Filesystem has been set read-only
[  394.479229][T11138] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  394.488816][T11138] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  394.499268][T11138] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
10:01:08 executing program 2:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket(0x1d, 0x5, 0x0)

10:01:08 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000), 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:01:08 executing program 1:
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x60000000}, 0x0)

10:01:08 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000540)=0x2, 0x2}, {&(0x7f0000000580)}], 0xd, 0xd, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:01:08 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

10:01:08 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0)

10:01:08 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000), 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  394.798561][T11157] can: request_module (can-proto-0) failed.
[  394.896922][T11157] can: request_module (can-proto-0) failed.
10:01:08 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0)

10:01:08 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000580)}], 0xd, 0xc, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:01:08 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000000206010000000e000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a30000000000500050000000000050001000600000024000780080006400010000008000840fffffff006000440f9ff003e0600054000030acae49be4b9764dc4f5f219c90e00000024422a0424f676cf9c1aeb5e984809b749e4acd47109b936e4ec22e5c38485d48d318caed17e33f4f930536867200000000e050000008051a168bc854c0631dfac413f0e20054f9b5a1c7c2cd444a80fbb189f4d9510b14073dbff9e426d5fa7e0c6987ea85c629e3604df541cabb471bc97a45f0503eb1db5a602a4bd484490c7fcd3339bb2b5622d1c96254d3da9bfb0868f5406bfcb8766335383000000000000"], 0x6c}}, 0x0)

10:01:08 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:01:08 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

10:01:08 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

[  395.004392][T11117] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
10:01:08 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0)

10:01:08 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:01:08 executing program 2:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000780200000000004c00000000080100000000000008010000e0010000e0010000e0010000e0010000e001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d80008010000000000000000000000000000000000000000280073746174650000000000000000000000000000000000000000000000000000000000000000004000636f6e6e6c696d697400000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000003000434f4e4e4d41524b0000000000000000000000000000000000000000000100000000000000000000000000000000e0000001ac1414aa0000000000000000766361f9ff000000000000000000000076657468305f746f5f62726964676500000000000000000000000000000000000000000000000000000000000000000000000000000000007000d80000000000000000000000000000000000000000006800435400000000000000000000000000000000000000000000000000000001000000000000040000000000736e6d705f747261700000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
dup(0xffffffffffffffff)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4048010)
gettid()
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000440))

10:01:08 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  395.300731][   T26] audit: type=1326 audit(1586685668.782:42): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11189 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:01:08 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x60000000}, 0x0)

[  395.551579][T11212] xt_CT: You must specify a L4 protocol and not use inversions on it
10:01:09 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:01:09 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x60000000}, 0x0)

[  396.054991][T11208] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  396.062896][T11208] FAT-fs (loop5): Filesystem has been set read-only
10:01:17 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000580)}], 0xd, 0xc, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:01:17 executing program 2:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000780200000000004c00000000080100000000000008010000e0010000e0010000e0010000e0010000e001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d80008010000000000000000000000000000000000000000280073746174650000000000000000000000000000000000000000000000000000000000000000004000636f6e6e6c696d697400000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000003000434f4e4e4d41524b0000000000000000000000000000000000000000000100000000000000000000000000000000e0000001ac1414aa0000000000000000766361f9ff000000000000000000000076657468305f746f5f62726964676500000000000000000000000000000000000000000000000000000000000000000000000000000000007000d80000000000000000000000000000000000000000006800435400000000000000000000000000000000000000000000000000000001000000000000040000000000736e6d705f747261700000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
dup(0xffffffffffffffff)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4048010)
gettid()
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000440))

10:01:17 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

10:01:17 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:01:17 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x60000000}, 0x0)

10:01:17 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="00068a7dd8a16795e08348c14dadc3cae622450fbe7dea329b3f475919d59b95e0bfc6b372148ca894a9a1a23e220ad9d3513f2b4f06b405381bf8c7784a744eaf295764d3c9f91d5fe01d83d1347d0000000000000000000000000000000000000000000000000000e5a329208155a5c29a9c62db109533d31bc1e2d34025955e171cfba60ed3b592dd0cf8bba87a338b4ae0357c55ce0eacb7d930f586549418d4447c549b750049619549756f76d6949ceed4fd74c7870c9b35c2df6672edc450cce030618925aa1f31da9d6554900606ae1f4352090a4ce52a92a8e6fb9b6168eab610eec77ba30494bb059a5f2a8c06166611b5ea2eb5cfbe9f6c6ca462deef6e68969102babbf9a5926796beac"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:01:17 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  404.386977][T11242] xt_CT: You must specify a L4 protocol and not use inversions on it
10:01:17 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x60000000}, 0x0)

10:01:17 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1)
ioctl$USBDEVFS_CLEAR_HALT(r0, 0x4004551e, 0x0)

[  404.440351][   T26] audit: type=1326 audit(1586685677.922:43): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11236 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:01:18 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:01:18 executing program 2:
r0 = socket(0x200000000000011, 0x3, 0x0)
sendmmsg(r0, &(0x7f0000005b40)=[{{&(0x7f00000001c0)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x2}}, 0x80, 0x0}}], 0x1, 0x0)

[  404.598406][T11261] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  404.607234][T11261] FAT-fs (loop5): Filesystem has been set read-only
[  404.615507][T11261] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  404.625046][T11261] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  404.634176][T11261] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
10:01:18 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x60000000}, 0x0)

[  405.122827][T11236] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  412.254708][    T0] NOHZ: local_softirq_pending 08
10:01:26 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000580)}], 0xd, 0xc, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:01:26 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

10:01:26 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:01:26 executing program 2:
r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x802c550a, &(0x7f0000000000)={0x0, 0x0, "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"})

10:01:26 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x60000000}, 0x0)

10:01:26 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:01:26 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:01:26 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, 0xb, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x60000000}, 0x0)

10:01:26 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

[  413.265952][   T26] audit: type=1326 audit(1586685686.743:44): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11286 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:01:26 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:01:26 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, 0xb, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x60000000}, 0x0)

[  413.418391][T11312] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  413.427221][T11312] FAT-fs (loop5): Filesystem has been set read-only
[  413.435850][T11312] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  413.445421][T11312] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  413.455691][T11312] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
10:01:26 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

[  413.953779][T11286] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
10:01:35 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {0x0, 0x2}, {&(0x7f0000000580)}], 0xd, 0xd, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:01:35 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

10:01:35 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:01:35 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, 0xb, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x60000000}, 0x0)

10:01:35 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

10:01:35 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:01:35 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:01:35 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

10:01:35 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {&(0x7f0000000500)}, {0x0}, {&(0x7f0000000580)}], 0xd, 0xd, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

[  422.160843][   T26] audit: type=1326 audit(1586685695.633:45): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11352 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:01:35 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x28, 0xb, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x28}, 0x1, 0x60000000}, 0x0)

10:01:35 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

[  422.325355][T11374] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  422.334644][T11374] FAT-fs (loop5): Filesystem has been set read-only
[  422.342838][T11374] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
10:01:35 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {0x0}, {&(0x7f0000000580)}], 0xd, 0xc, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:01:35 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

10:01:35 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x28, 0xb, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x28}, 0x1, 0x60000000}, 0x0)

10:01:35 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:01:35 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

10:01:36 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7b9748266de67682209f2146e8189e616b511de97ca86ea27acfd38af7eb360fb", 0x41}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

10:01:36 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:01:36 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x28, 0xb, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x28}, 0x1, 0x60000000}, 0x0)

10:01:36 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

[  422.845149][T11352] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
10:01:36 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

10:01:36 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, 0xb, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x24}, 0x1, 0x60000000}, 0x0)

10:01:36 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

[  423.180549][   T26] audit: type=1326 audit(1586685696.653:46): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11412 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
[  423.287902][T11426] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  423.297212][T11426] FAT-fs (loop5): Filesystem has been set read-only
[  423.305840][T11426] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  423.879984][T11412] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
10:01:45 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {0x0}, {&(0x7f0000000580)}], 0xd, 0xc, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:01:45 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

10:01:45 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, 0xb, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x24}, 0x1, 0x60000000}, 0x0)

10:01:45 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:01:45 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

10:01:45 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:01:45 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, 0xb, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x24}, 0x1, 0x60000000}, 0x0)

10:01:45 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

[  431.716223][   T26] audit: type=1326 audit(1586685705.194:47): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11440 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:01:45 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0xb, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}]}, 0x20}, 0x1, 0x60000000}, 0x0)

10:01:45 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

10:01:45 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

[  431.861845][T11456] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  431.922629][T11456] FAT-fs (loop5): Filesystem has been set read-only
[  431.956380][T11456] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
10:01:45 executing program 2:
bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

10:01:53 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {0x0}, {&(0x7f0000000580)}], 0xd, 0xc, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:01:53 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0xb, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}]}, 0x20}, 0x1, 0x60000000}, 0x0)

10:01:53 executing program 2:
bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

10:01:53 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7", 0x21}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

10:01:53 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:01:53 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:01:54 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0xb, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}]}, 0x20}, 0x1, 0x60000000}, 0x0)

[  440.509518][   T26] audit: type=1326 audit(1586685713.984:48): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11485 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
[  440.617061][T11497] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  440.629173][T11497] FAT-fs (loop5): Filesystem has been set read-only
[  440.637263][T11497] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  440.646610][T11497] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  440.656778][T11497] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
10:01:54 executing program 2:
bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

10:01:54 executing program 1:
r0 = memfd_create(&(0x7f0000000140)='\xedr!QY\x88=Vx\xa1\xd1<\xdeb\x17\xd3\xe2i\x1d5\x17\xa4\x00\xd8\x02\x9f\x11\xfa\t\x13]\f\xcbo\xc4X\x00\x94/\x96h\xef~Ms\"\x00\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080)=0x20000100000094, 0x8)
sendfile(r0, r0, &(0x7f00000000c0), 0xfeff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x77359400})

10:01:54 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

10:01:54 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b249ec3b90432fef9feee9d99d777138a7", 0x21}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

10:01:54 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

[  441.261109][T11485] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
10:02:03 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000580)}], 0xd, 0xd, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:02:03 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:02:03 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:02:03 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

10:02:03 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f1", 0x1}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

10:02:03 executing program 1:
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2a, &(0x7f000002eff0)={0x264, &(0x7f0000000000)=[{}]}, 0x10)

[  449.792714][T11557] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  449.801521][T11557] FAT-fs (loop5): Filesystem has been set read-only
[  449.810532][T11557] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  449.821307][T11557] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  449.831200][T11557] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
10:02:03 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

10:02:03 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {0x0}, {&(0x7f0000000580)}], 0xd, 0xc, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:02:03 executing program 1:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffd000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0)
sendfile(r3, 0xffffffffffffffff, 0x0, 0x7ffff000)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00')
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0)
sendfile(r5, r4, 0x0, 0x7ffff000)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000100)={<r6=>0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x3ff, @mcast2, 0x100}]}, &(0x7f0000000140)=0x10)
setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180)={r6, 0x7f}, 0x8)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:02:03 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f1", 0x1}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

10:02:03 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

10:02:03 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:02:03 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

10:02:03 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

[  450.444418][T11540] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
10:02:04 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:02:04 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

10:02:04 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f1", 0x1}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

10:02:04 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

[  450.838843][T11608] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  450.848031][T11608] FAT-fs (loop5): Filesystem has been set read-only
[  450.856267][T11608] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  450.865245][T11608] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  450.874772][T11608] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
10:02:04 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

[  451.485574][T11602] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  455.134645][    T0] NOHZ: local_softirq_pending 08
[  456.417036][    T0] NOHZ: local_softirq_pending 08
10:02:12 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {0x0}, {&(0x7f0000000580)}], 0xd, 0xc, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:02:12 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:02:12 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

10:02:12 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40b2", 0x11}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

10:02:12 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:02:12 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

10:02:13 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

10:02:13 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

10:02:13 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

[  459.534751][T11644] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  459.543480][T11644] FAT-fs (loop5): Filesystem has been set read-only
[  459.551956][T11644] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  459.561528][T11644] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  459.572128][T11644] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
10:02:13 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f1", 0x1}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

10:02:13 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

10:02:13 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

[  460.156726][T11626] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
10:02:21 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {0x0}, {&(0x7f0000000580)}], 0xd, 0xc, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:02:21 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:02:21 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

10:02:21 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

10:02:21 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:02:21 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f1", 0x1}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

10:02:21 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

10:02:21 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

[  468.356419][   T26] audit: type=1326 audit(1586685741.836:49): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11677 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:02:21 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

10:02:21 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

10:02:22 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

10:02:22 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f1", 0x1}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

[  469.064607][T11700] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  469.081103][T11700] FAT-fs (loop5): Filesystem has been set read-only
10:02:30 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000580)}], 0xd, 0xc, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:02:30 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

10:02:30 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
accept$alg(r0, 0x0, 0x0)
write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000080), 0xfff2)
recvmmsg(0xffffffffffffffff, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

10:02:30 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5db", 0x9}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

10:02:30 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="00068a7dd8a16795e08348c14dadc3cae622450fbe7dea329b3f475919d59b95e0bfc6b372148ca894a9a1a23e220ad9d3513f2b4f06b405381bf8c7784a744eaf295764d3c9f91d5fe01d83d1347d0000000000000000000000000000000000000000000000000000e5a329208155a5c29a9c62db109533d31bc1e2d34025955e171cfba60ed3b592dd0cf8bba87a338b4ae0357c55ce0eacb7d930f586549418d4447c549b750049619549756f76d6949ceed4fd74c7870c9b35c2df6672edc450cce030618925aa1f31da9d6554900606ae1f4352090a4ce52a92a8e6fb9b6168eab610eec77ba30494bb059a5f2a8c06166611b5ea2eb5cfbe9f6c6ca462deef6e68969102babbf9a5926796beac"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:02:30 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  477.331524][   T26] audit: type=1326 audit(1586685750.817:50): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11726 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:02:30 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
accept$alg(r0, 0x0, 0x0)
write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000080), 0xfff2)
recvmmsg(0xffffffffffffffff, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

10:02:30 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

10:02:31 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5db", 0x9}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

10:02:31 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
accept$alg(r0, 0x0, 0x0)
write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000080), 0xfff2)
recvmmsg(0xffffffffffffffff, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

10:02:31 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

10:02:31 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
r1 = dup(0xffffffffffffffff)
write$UHID_DESTROY(r1, &(0x7f0000000080), 0xfff2)
recvmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

[  478.101327][T11745] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  478.151810][T11745] FAT-fs (loop5): Filesystem has been set read-only
10:02:40 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000580)}], 0xd, 0xc, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:02:40 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
r1 = dup(0xffffffffffffffff)
write$UHID_DESTROY(r1, &(0x7f0000000080), 0xfff2)
recvmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

10:02:40 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

10:02:40 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5db", 0x9}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

10:02:40 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:02:40 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:02:40 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
r1 = dup(0xffffffffffffffff)
write$UHID_DESTROY(r1, &(0x7f0000000080), 0xfff2)
recvmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

10:02:40 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

[  487.294844][   T26] audit: type=1326 audit(1586685760.777:51): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11779 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:02:40 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44", 0xd}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

10:02:41 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

10:02:41 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

[  487.575904][T11796] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  487.624390][T11796] FAT-fs (loop5): Filesystem has been set read-only
[  487.676330][T11796] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
10:02:41 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

10:02:49 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000580)}], 0xd, 0xc, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:02:49 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

10:02:49 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)

10:02:49 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44", 0xd}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

10:02:49 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, 0x0, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:02:49 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

[  496.218472][   T26] audit: type=1326 audit(1586685769.698:52): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11823 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:02:49 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

10:02:49 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)

[  496.459247][T11842] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  496.489151][T11842] FAT-fs (loop5): Filesystem has been set read-only
[  496.515425][T11842] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
10:02:50 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

10:02:50 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44", 0xd}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

[  496.555862][T11842] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
10:02:50 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)

10:02:50 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, 0x0, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  496.612034][T11842] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  496.974733][T11823] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
10:02:58 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000580)}], 0xd, 0xd, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:02:58 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

10:02:58 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040), 0x0)

10:02:58 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca", 0xf}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

10:02:58 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:02:58 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, 0x0, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  505.352678][   T26] audit: type=1326 audit(1586685778.838:53): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11880 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:02:58 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

10:02:58 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040), 0x0)

10:02:58 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000580)}], 0xd, 0xc, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:02:59 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040), 0x0)

10:02:59 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca", 0xf}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

[  505.607276][T11897] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  505.644108][T11897] FAT-fs (loop5): Filesystem has been set read-only
10:02:59 executing program 1:
bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
r1 = dup(r0)
write$UHID_DESTROY(r1, &(0x7f0000000080), 0xfff2)
recvmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

[  505.664805][T11897] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
10:02:59 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced", 0x18)

10:02:59 executing program 1:
bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
r1 = dup(r0)
write$UHID_DESTROY(r1, &(0x7f0000000080), 0xfff2)
recvmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

10:02:59 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced", 0x18)

10:02:59 executing program 1:
bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
r1 = dup(r0)
write$UHID_DESTROY(r1, &(0x7f0000000080), 0xfff2)
recvmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

10:02:59 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:02:59 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced", 0x18)

10:02:59 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca", 0xf}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

10:02:59 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040), 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  506.444781][   T26] audit: type=1326 audit(1586685779.928:54): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11937 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
[  506.700361][T11948] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  506.726854][T11948] FAT-fs (loop5): Filesystem has been set read-only
[  506.757098][T11948] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  506.794793][T11948] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  506.828510][T11948] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  507.195928][T11937] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
10:03:08 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62", 0x24)

10:03:08 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

10:03:08 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000580)}], 0xd, 0xc, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:03:08 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40", 0x10}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

10:03:08 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:03:08 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040), 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:03:08 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62", 0x24)

10:03:08 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

[  515.172710][   T26] audit: type=1326 audit(1586685788.659:55): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11964 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:03:08 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

10:03:08 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62", 0x24)

10:03:08 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40", 0x10}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

10:03:09 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

10:03:09 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000", 0x2a)

10:03:09 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

[  515.930361][T11986] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  515.949770][T11986] FAT-fs (loop5): Filesystem has been set read-only
10:03:17 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000580)}], 0xd, 0xc, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:03:17 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000", 0x2a)

10:03:17 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000200)="f187504af7db14e5dbfa3d1c44caca40", 0x10}, {&(0x7f0000001500)="c2", 0x1}], 0x2)

10:03:17 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040), 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:03:17 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

10:03:17 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:03:17 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

10:03:17 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000", 0x2a)

[  524.493360][   T26] audit: type=1326 audit(1586685797.980:56): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12020 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:03:18 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

10:03:18 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

10:03:18 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000", 0x2d)

10:03:18 executing program 0:
mlockall(0x7)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

[  524.791336][T12042] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  524.843898][T12042] FAT-fs (loop5): Filesystem has been set read-only
[  524.903664][T12042] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  524.984663][T12042] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  525.005159][T12042] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  525.200137][T12020] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
10:03:26 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000580)}], 0xd, 0xd, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:03:26 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

10:03:26 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = gettid()
r2 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20}, 0x0)

10:03:26 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000", 0x2d)

10:03:26 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:03:26 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:03:27 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

[  533.540067][   T26] audit: type=1326 audit(1586685807.031:57): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12066 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:03:27 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000", 0x2d)

10:03:27 executing program 0:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, &(0x7f00000000c0)="ffb10c10ba4300b0c8ee660f38826f3cf30f01e80f69e866f20f38f015650f01c883dd000f0131baf80c66b87aa1cc8b66efbafc0ced", 0x36}], 0x28d, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x200000000000200, 0x0, 0x4ca]})
writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000200)="390000001300090069f0ffffff000000ab00800016000000460001070700001419000100100000080000506800000000000fef38bf461e59d7", 0x39}], 0x1)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200))

10:03:27 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

10:03:27 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000580)}], 0xd, 0xc, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

[  533.894372][T12086] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
10:03:27 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e600", 0x2f)

[  533.938935][T12086] FAT-fs (loop5): Filesystem has been set read-only
10:03:27 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040), 0x0)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

[  533.982339][T12086] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[  534.035231][T12086] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
10:03:27 executing program 0:
r0 = io_uring_setup(0x65, &(0x7f0000000040))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)=""/28, 0x1c}], 0x1)

[  534.093278][T12086] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
10:03:27 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e600", 0x2f)

10:03:27 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040), 0x0)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

[  534.288963][T12066] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
10:03:27 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e600", 0x2f)

10:03:28 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="00068a7dd8a16795e08348c14dadc3cae622450fbe7dea329b3f475919d59b95e0bfc6b372148ca894a9a1a23e220ad9d3513f2b4f06b405381bf8c7784a744eaf295764d3c9f91d5fe01d83d1347d0000000000000000000000000000000000000000000000000000e5a329208155a5c29a9c62db109533d31bc1e2d34025955e171cfba60ed3b592dd0cf8bba87a338b4ae0357c55ce0eacb7d930f586549418d4447c549b750049619549756f76d6949ceed4fd74c7870c9b35c2df6672edc450cce030618925aa1f31da9d6554900606ae1f4352090a4ce52a92a8e6fb9b6168eab610eec77ba30494bb059a5f2a8c06166611b5ea2eb5cfbe9f6c6ca462deef6e68969102babbf9a5926796beac"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:03:28 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040), 0x0)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

10:03:28 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:03:28 executing program 0:
r0 = io_uring_setup(0x65, &(0x7f0000000040))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)=""/28, 0x1c}], 0x1)

10:03:28 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00')
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x24, r3, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x0)

[  534.633341][   T26] audit: type=1326 audit(1586685808.122:58): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12132 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
[  536.413957][    T0] NOHZ: local_softirq_pending 08
10:03:36 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000580)}], 0xd, 0xc, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:03:36 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced", 0x18)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

10:03:36 executing program 0:
r0 = io_uring_setup(0x65, &(0x7f0000000040))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)=""/28, 0x1c}], 0x1)

10:03:36 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
recvmmsg(0xffffffffffffffff, &(0x7f000000b180)=[{{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f00000002c0)=""/163, 0xa3}], 0x1}}], 0x1, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000040)={@dev, 0x5}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000140)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00')
preadv(r3, &(0x7f00000017c0), 0x1d0, 0x0)
openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0)

10:03:36 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:03:36 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:03:36 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced", 0x18)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

10:03:36 executing program 0:
r0 = io_uring_setup(0x65, &(0x7f0000000040))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)=""/28, 0x1c}], 0x1)

[  543.426303][   T26] audit: type=1326 audit(1586685816.913:59): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12167 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:03:37 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced", 0x18)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

10:03:37 executing program 0:
r0 = io_uring_setup(0x65, &(0x7f0000000040))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r1, r1)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)=""/28, 0x1c}], 0x1)

10:03:37 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62", 0x24)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

10:03:37 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:03:45 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000580)}], 0xd, 0xc, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:03:45 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:03:45 executing program 0:
r0 = io_uring_setup(0x65, &(0x7f0000000040))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r1, r1)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)=""/28, 0x1c}], 0x1)

10:03:45 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62", 0x24)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

10:03:45 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:03:45 executing program 2:

10:03:45 executing program 2:

[  552.388908][   T26] audit: type=1326 audit(1586685825.874:60): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12213 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:03:46 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62", 0x24)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

10:03:46 executing program 0:
r0 = io_uring_setup(0x65, &(0x7f0000000040))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r1, r1)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)=""/28, 0x1c}], 0x1)

10:03:46 executing program 2:

10:03:46 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000", 0x2a)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

10:03:46 executing program 0:
r0 = io_uring_setup(0x65, &(0x7f0000000040))
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)=""/28, 0x1c}], 0x1)

10:03:54 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000580)}], 0xd, 0xc, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:03:54 executing program 2:

10:03:54 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000", 0x2a)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

10:03:54 executing program 0:
r0 = io_uring_setup(0x65, &(0x7f0000000040))
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)=""/28, 0x1c}], 0x1)

10:03:54 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="00068a7dd8a16795e08348c14dadc3cae622450fbe7dea329b3f475919d59b95e0bfc6b372148ca894a9a1a23e220ad9d3513f2b4f06b405381bf8c7784a744eaf295764d3c9f91d5fe01d83d1347d0000000000000000000000000000000000000000000000000000e5a329208155a5c29a9c62db109533d31bc1e2d34025955e171cfba60ed3b592dd0cf8bba87a338b4ae0357c55ce0eacb7d930f586549418d4447c549b750049619549756f76d6949ceed4fd74c7870c9b35c2df6672edc450cce030618925aa1f31da9d6554900606ae1f4352090a4ce52a92a8e6fb9b6168eab610eec77ba30494bb059a5f2a8c06166611b5ea2eb5cfbe9f6c6ca462deef6e68969102babbf9a5926796beac"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:03:54 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:03:54 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000", 0x2a)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

10:03:54 executing program 2:

[  561.330541][   T26] audit: type=1326 audit(1586685834.815:61): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12260 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:03:54 executing program 0:
r0 = io_uring_setup(0x65, &(0x7f0000000040))
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)=""/28, 0x1c}], 0x1)

10:03:55 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000", 0x2d)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

10:03:55 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:03:55 executing program 0:
r0 = io_uring_setup(0x65, &(0x7f0000000040))
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)=""/28, 0x1c}], 0x1)

[  562.077389][   T26] audit: type=1326 audit(1586685835.565:62): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12292 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:04:04 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000580)}], 0xd, 0xc, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:04:04 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:04:04 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000", 0x2d)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

10:04:04 executing program 0:
r0 = io_uring_setup(0x65, &(0x7f0000000040))
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)=""/28, 0x1c}], 0x1)

10:04:04 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(0x0, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:04:04 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

[  570.837958][   T26] audit: type=1326 audit(1586685844.326:63): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12319 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:04:04 executing program 0:
r0 = io_uring_setup(0x65, &(0x7f0000000040))
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)=""/28, 0x1c}], 0x1)

10:04:04 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000", 0x2d)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

[  571.047821][   T26] audit: type=1326 audit(1586685844.376:64): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12317 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:04:04 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e600", 0x2f)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

10:04:04 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(0x0, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:04:05 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:04:05 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

[  571.808729][   T26] audit: type=1326 audit(1586685845.296:65): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12357 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
[  571.881712][   T26] audit: type=1326 audit(1586685845.296:66): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12356 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:04:14 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000580)}], 0xd, 0xc, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:04:14 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)=""/28, 0x1c}], 0x1)

10:04:14 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e600", 0x2f)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

10:04:14 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:04:14 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:04:14 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(0x0, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  580.784410][   T26] audit: type=1326 audit(1586685854.277:67): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12383 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:04:14 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e600", 0x2f)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

[  580.838245][   T26] audit: type=1326 audit(1586685854.277:68): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12380 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:04:15 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:04:15 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:04:15 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)=""/28, 0x1c}], 0x1)

10:04:15 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

10:04:15 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)=""/28, 0x1c}], 0x1)

[  581.815989][   T26] audit: type=1326 audit(1586685855.307:69): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12410 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
[  582.279872][   T26] audit: type=1326 audit(1586685855.767:70): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12414 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:04:24 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000580)}], 0xd, 0xc, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:04:24 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

10:04:24 executing program 0:
r0 = io_uring_setup(0x0, &(0x7f0000000040))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)=""/28, 0x1c}], 0x1)

10:04:24 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:04:24 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:04:24 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:04:24 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

10:04:24 executing program 0:
r0 = io_uring_setup(0x0, &(0x7f0000000040))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)=""/28, 0x1c}], 0x1)

[  591.200582][   T26] audit: type=1326 audit(1586685864.698:71): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12449 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
[  591.325283][   T26] audit: type=1326 audit(1586685864.748:72): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12444 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:04:24 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
accept$alg(r0, 0x0, 0x0)
r1 = dup(0xffffffffffffffff)
write$UHID_DESTROY(r1, &(0x7f0000000080), 0xfff2)
recvmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

10:04:25 executing program 0:
r0 = io_uring_setup(0x0, &(0x7f0000000040))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)=""/28, 0x1c}], 0x1)

[  591.699000][T12476] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500)
10:04:25 executing program 5:
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

[  591.854637][T12476] FAT-fs (loop2): Filesystem has been set read-only
10:04:25 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
accept$alg(r0, 0x0, 0x0)
r1 = dup(0xffffffffffffffff)
write$UHID_DESTROY(r1, &(0x7f0000000080), 0xfff2)
recvmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

[  591.959789][T12476] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500)
[  592.073382][   T26] audit: type=1326 audit(1586685865.568:73): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12482 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:04:34 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000580)}], 0xd, 0xc, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:04:34 executing program 0:
r0 = io_uring_setup(0x65, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)=""/28, 0x1c}], 0x1)

10:04:34 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
accept$alg(r0, 0x0, 0x0)
r1 = dup(0xffffffffffffffff)
write$UHID_DESTROY(r1, &(0x7f0000000080), 0xfff2)
recvmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

10:04:34 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:04:34 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:04:34 executing program 5:
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:04:34 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

[  601.123967][   T26] audit: type=1326 audit(1586685874.619:74): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12504 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:04:34 executing program 0:
r0 = io_uring_setup(0x65, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)=""/28, 0x1c}], 0x1)

[  601.373368][   T26] audit: type=1326 audit(1586685874.869:75): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12500 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:04:35 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

10:04:35 executing program 5:
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:04:35 executing program 0:
r0 = io_uring_setup(0x65, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)=""/28, 0x1c}], 0x1)

10:04:35 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  602.184984][   T26] audit: type=1326 audit(1586685875.679:76): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12529 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:04:44 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000580)}], 0xd, 0xc, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:04:44 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

10:04:44 executing program 0:
r0 = io_uring_setup(0x65, &(0x7f0000000040))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(0xffffffffffffffff, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)=""/28, 0x1c}], 0x1)

10:04:44 executing program 2:
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="00068a7dd8a16795e08348c14dadc3cae622450fbe7dea329b3f475919d59b95e0bfc6b372148ca894a9a1a23e220ad9d3513f2b4f06b405381bf8c7784a744eaf295764d3c9f91d5fe01d83d1347d0000000000000000000000000000000000000000000000000000e5a329208155a5c29a9c62db109533d31bc1e2d34025955e171cfba60ed3b592dd0cf8bba87a338b4ae0357c55ce0eacb7d930f586549418d4447c549b750049619549756f76d6949ceed4fd74c7870c9b35c2df6672edc450cce030618925aa1f31da9d6554900606ae1f4352090a4ce52a92a8e6fb9b6168eab610eec77ba30494bb059a5f2a8c06166611b5ea2eb5cfbe9f6c6ca462deef6e68969102babbf9a5926796beac"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:04:44 executing program 5:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:04:44 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

[  611.389220][   T26] audit: type=1326 audit(1586685884.890:77): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12548 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:04:44 executing program 0:
r0 = io_uring_setup(0x65, &(0x7f0000000040))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(0xffffffffffffffff, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)=""/28, 0x1c}], 0x1)

[  611.620621][   T26] audit: type=1326 audit(1586685885.060:78): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12553 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:04:45 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000", 0x2d)

10:04:45 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

[  612.327220][   T26] audit: type=1326 audit(1586685885.820:79): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12552 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:04:45 executing program 4:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000580)}], 0xd, 0xc, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:04:46 executing program 0:
r0 = io_uring_setup(0x65, &(0x7f0000000040))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(0xffffffffffffffff, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)=""/28, 0x1c}], 0x1)

10:04:46 executing program 5:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

[  612.846008][   T26] audit: type=1326 audit(1586685886.340:80): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12597 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:04:54 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000580)}], 0xd, 0xc, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:04:54 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:04:54 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

10:04:54 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000", 0x2d)

10:04:54 executing program 0:
r0 = io_uring_setup(0x65, &(0x7f0000000040))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)=""/28, 0x1c}], 0x1)

10:04:54 executing program 5:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:04:54 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

10:04:54 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(0xffffffffffffffff, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

10:04:55 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000", 0x2a)

10:04:55 executing program 0:
r0 = io_uring_setup(0x65, &(0x7f0000000040))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)=""/28, 0x1c}], 0x1)

[  621.485895][   T26] audit: type=1326 audit(1586685894.981:81): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12619 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
[  621.610967][   T26] audit: type=1326 audit(1586685895.021:82): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12617 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:04:55 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(0xffffffffffffffff, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

10:04:55 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000", 0x2a)

[  622.295621][T12657] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500)
[  622.336303][T12657] FAT-fs (loop2): Filesystem has been set read-only
10:05:04 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000580)}], 0xd, 0xc, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:05:04 executing program 0:
r0 = io_uring_setup(0x65, &(0x7f0000000040))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)=""/28, 0x1c}], 0x1)

10:05:04 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(0xffffffffffffffff, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

10:05:04 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', 0x0, 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="00068a7dd8a16795e08348c14dadc3cae622450fbe7dea329b3f475919d59b95e0bfc6b372148ca894a9a1a23e220ad9d3513f2b4f06b405381bf8c7784a744eaf295764d3c9f91d5fe01d83d1347d0000000000000000000000000000000000000000000000000000e5a329208155a5c29a9c62db109533d31bc1e2d34025955e171cfba60ed3b592dd0cf8bba87a338b4ae0357c55ce0eacb7d930f586549418d4447c549b750049619549756f76d6949ceed4fd74c7870c9b35c2df6672edc450cce030618925aa1f31da9d6554900606ae1f4352090a4ce52a92a8e6fb9b6168eab610eec77ba30494bb059a5f2a8c06166611b5ea2eb5cfbe9f6c6ca462deef6e68969102babbf9a5926796beac"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:05:04 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62", 0x24)

10:05:04 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

[  630.735899][   T26] audit: type=1326 audit(1586685904.231:83): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12676 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:05:04 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="00068a7dd8a16795e08348c14dadc3cae622450fbe7dea329b3f475919d59b95e0bfc6b372148ca894a9a1a23e220ad9d3513f2b4f06b405381bf8c7784a744eaf295764d3c9f91d5fe01d83d1347d0000000000000000000000000000000000000000000000000000e5a329208155a5c29a9c62db109533d31bc1e2d34025955e171cfba60ed3b592dd0cf8bba87a338b4ae0357c55ce0eacb7d930f586549418d4447c549b750049619549756f76d6949ceed4fd74c7870c9b35c2df6672edc450cce030618925aa1f31da9d6554900606ae1f4352090a4ce52a92a8e6fb9b6168eab610eec77ba30494bb059a5f2a8c06166611b5ea2eb5cfbe9f6c6ca462deef6e68969102babbf9a5926796beac"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

[  630.861096][   T26] audit: type=1326 audit(1586685904.361:84): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12680 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:05:04 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)

10:05:04 executing program 0:
r0 = io_uring_setup(0x65, &(0x7f0000000040))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)=""/28, 0x1c}], 0x1)

[  630.998934][T12698] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000f00)
[  631.067415][T12698] FAT-fs (loop2): Filesystem has been set read-only
[  631.117685][T12698] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500)
10:05:04 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)

10:05:04 executing program 0:
r0 = io_uring_setup(0x65, &(0x7f0000000040))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)=""/28, 0x1c}], 0x1)

[  631.470897][   T26] audit: type=1326 audit(1586685904.972:85): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12699 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
[  631.495466][T12676] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500)
10:05:05 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', 0x0, 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

[  631.900190][   T26] audit: type=1326 audit(1586685905.402:86): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12727 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:05:14 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000580)}], 0xd, 0xc, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:05:14 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)

10:05:14 executing program 0:
r0 = io_uring_setup(0x65, &(0x7f0000000040))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)=""/28, 0x1c}], 0x1)

10:05:14 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', 0x0, 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:05:14 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:05:14 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', 0x0, 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:05:14 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000000380), 0x0, 0x0, 0x0)

10:05:14 executing program 0:
r0 = io_uring_setup(0x65, &(0x7f0000000040))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)=""/28, 0x1c}], 0x1)

[  640.703530][   T26] audit: type=1326 audit(1586685914.202:87): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12748 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
[  640.749514][   T26] audit: type=1326 audit(1586685914.252:88): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12746 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
[  641.024454][   T26] audit: type=1326 audit(1586685914.272:89): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12751 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:05:14 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:05:14 executing program 0:
r0 = io_uring_setup(0x65, &(0x7f0000000040))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)=""/28, 0x1c}], 0x1)

10:05:14 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000000380), 0x0, 0x0, 0x0)

[  641.428406][T12782] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000f00)
[  641.436363][T12782] FAT-fs (loop4): Filesystem has been set read-only
[  641.443115][T12782] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000500)
10:05:15 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', 0x0, 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

[  641.625573][T12746] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000500)
[  641.656863][T12800] FAT-fs (loop5): bogus number of reserved sectors
[  641.714541][T12800] FAT-fs (loop5): Can't find a valid FAT filesystem
[  641.750255][   T26] audit: type=1326 audit(1586685915.242:90): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12796 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
[  641.783120][   T26] audit: type=1326 audit(1586685915.272:91): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12799 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:05:23 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000580)}], 0xd, 0xd, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:05:23 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000000380), 0x0, 0x0, 0x0)

10:05:23 executing program 0:
r0 = io_uring_setup(0x65, &(0x7f0000000040))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)=""/28, 0x1c}], 0x1)

10:05:23 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:05:23 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', 0x0, 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="00068a7dd8a16795e08348c14dadc3cae622450fbe7dea329b3f475919d59b95e0bfc6b372148ca894a9a1a23e220ad9d3513f2b4f06b405381bf8c7784a744eaf295764d3c9f91d5fe01d83d1347d0000000000000000000000000000000000000000000000000000e5a329208155a5c29a9c62db109533d31bc1e2d34025955e171cfba60ed3b592dd0cf8bba87a338b4ae0357c55ce0eacb7d930f586549418d4447c549b750049619549756f76d6949ceed4fd74c7870c9b35c2df6672edc450cce030618925aa1f31da9d6554900606ae1f4352090a4ce52a92a8e6fb9b6168eab610eec77ba30494bb059a5f2a8c06166611b5ea2eb5cfbe9f6c6ca462deef6e68969102babbf9a5926796beac"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:05:23 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:05:23 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

[  650.474451][T12826] FAT-fs (loop5): bogus number of reserved sectors
[  650.530989][T12826] FAT-fs (loop5): Can't find a valid FAT filesystem
10:05:24 executing program 0:
io_uring_setup(0x65, &(0x7f0000000040))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)=""/28, 0x1c}], 0x1)

[  650.572029][   T26] audit: type=1326 audit(1586685924.063:92): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12820 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:05:24 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

10:05:24 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000580)}], 0xd, 0xc, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

[  650.764512][   T26] audit: type=1326 audit(1586685924.133:93): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12819 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
[  651.140787][T12865] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  651.162907][   T26] audit: type=1326 audit(1586685924.153:94): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12822 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:05:24 executing program 0:
io_uring_setup(0x65, &(0x7f0000000040))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)=""/28, 0x1c}], 0x1)

10:05:24 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:05:24 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

[  651.293833][T12865] FAT-fs (loop4): Filesystem has been set read-only
[  651.302390][T12865] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000500)
[  651.311489][T12865] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000500)
[  651.319917][T12865] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000500)
10:05:24 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

[  651.405186][T12822] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000500)
10:05:25 executing program 0:
io_uring_setup(0x65, &(0x7f0000000040))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)=""/28, 0x1c}], 0x1)

10:05:25 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

[  651.509696][T12878] FAT-fs (loop2): bogus number of reserved sectors
10:05:25 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)}}], 0x1, 0x0, 0x0)

[  651.582636][T12878] FAT-fs (loop2): Can't find a valid FAT filesystem
[  651.642053][   T26] audit: type=1326 audit(1586685925.133:95): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12870 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
[  651.701368][T12885] FAT-fs (loop5): bogus number of reserved sectors
[  651.720151][T12885] FAT-fs (loop5): Can't find a valid FAT filesystem
[  651.820293][   T26] audit: type=1326 audit(1586685925.313:96): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12882 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:05:25 executing program 0:
r0 = io_uring_setup(0x65, &(0x7f0000000040))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)

[  651.889750][   T26] audit: type=1326 audit(1586685925.383:97): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12897 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:05:25 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)}}], 0x1, 0x0, 0x0)

10:05:25 executing program 0:
r0 = io_uring_setup(0x65, &(0x7f0000000040))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)

[  652.188309][T12913] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  652.220756][T12913] FAT-fs (loop4): Filesystem has been set read-only
10:05:25 executing program 0:
r0 = io_uring_setup(0x65, &(0x7f0000000040))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)

[  652.275834][T12913] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000500)
[  652.377172][T12913] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000500)
[  652.445595][T12913] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000500)
[  652.587687][T12897] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000500)
10:05:34 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000580)}], 0xd, 0xc, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:05:34 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:05:34 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)}}], 0x1, 0x0, 0x0)

10:05:34 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:05:34 executing program 0:
r0 = io_uring_setup(0x65, &(0x7f0000000040))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001440), 0x0)

10:05:34 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040), 0x0)

[  660.734333][T12943] FAT-fs (loop5): bogus number of reserved sectors
[  660.748812][T12943] FAT-fs (loop5): Can't find a valid FAT filesystem
10:05:34 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)

10:05:34 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="00068a7dd8a16795e08348c14dadc3cae622450fbe7dea329b3f475919d59b95e0bfc6b372148ca894a9a1a23e220ad9d3513f2b4f06b405381bf8c7784a744eaf295764d3c9f91d5fe01d83d1347d0000000000000000000000000000000000000000000000000000e5a329208155a5c29a9c62db109533d31bc1e2d34025955e171cfba60ed3b592dd0cf8bba87a338b4ae0357c55ce0eacb7d930f586549418d4447c549b750049619549756f76d6949ceed4fd74c7870c9b35c2df6672edc450cce030618925aa1f31da9d6554900606ae1f4352090a4ce52a92a8e6fb9b6168eab610eec77ba30494bb059a5f2a8c06166611b5ea2eb5cfbe9f6c6ca462deef6e68969102babbf9a5926796beac"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:05:34 executing program 0:
r0 = io_uring_setup(0x65, &(0x7f0000000040))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001440), 0x0)

10:05:34 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)

[  660.864975][   T26] audit: type=1326 audit(1586685934.364:98): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12936 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
[  660.945715][   T26] audit: type=1326 audit(1586685934.424:99): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12940 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:05:34 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)

[  661.395056][T12971] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
10:05:35 executing program 0:
r0 = io_uring_setup(0x65, &(0x7f0000000040))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001440), 0x0)

[  661.536503][T12971] FAT-fs (loop2): Filesystem has been set read-only
[  661.543400][T12971] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500)
[  661.623426][   T26] audit: type=1326 audit(1586685935.124:100): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12964 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
[  661.649206][T12940] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500)
10:05:43 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000580)}], 0xd, 0xc, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:05:43 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="00068a7dd8a16795e08348c14dadc3cae622450fbe7dea329b3f475919d59b95e0bfc6b372148ca894a9a1a23e220ad9d3513f2b4f06b405381bf8c7784a744eaf295764d3c9f91d5fe01d83d1347d0000000000000000000000000000000000000000000000000000e5a329208155a5c29a9c62db109533d31bc1e2d34025955e171cfba60ed3b592dd0cf8bba87a338b4ae0357c55ce0eacb7d930f586549418d4447c549b750049619549756f76d6949ceed4fd74c7870c9b35c2df6672edc450cce030618925aa1f31da9d6554900606ae1f4352090a4ce52a92a8e6fb9b6168eab610eec77ba30494bb059a5f2a8c06166611b5ea2eb5cfbe9f6c6ca462deef6e68969102babbf9a5926796beac"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:05:43 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:05:43 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:05:43 executing program 0:
r0 = io_uring_setup(0x65, &(0x7f0000000040))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001440)=[{0x0}], 0x1)

10:05:43 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="00068a7dd8a16795e08348c14dadc3cae622450fbe7dea329b3f475919d59b95e0bfc6b372148ca894a9a1a23e220ad9d3513f2b4f06b405381bf8c7784a744eaf295764d3c9f91d5fe01d83d1347d0000000000000000000000000000000000000000000000000000e5a329208155a5c29a9c62db109533d31bc1e2d34025955e171cfba60ed3b592dd0cf8bba87a338b4ae0357c55ce0eacb7d930f586549418d4447c549b750049619549756f76d6949ceed4fd74c7870c9b35c2df6672edc450cce030618925aa1f31da9d6554900606ae1f4352090a4ce52a92a8e6fb9b6168eab610eec77ba30494bb059a5f2a8c06166611b5ea2eb5cfbe9f6c6ca462deef6e68969102babbf9a5926796beac"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

[  670.328660][   T26] audit: type=1326 audit(1586685943.825:101): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13003 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:05:43 executing program 0:
r0 = io_uring_setup(0x65, &(0x7f0000000040))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001440)=[{0x0}], 0x1)

[  670.392743][T13016] FAT-fs (loop5): bogus number of reserved sectors
[  670.417373][T13016] FAT-fs (loop5): Can't find a valid FAT filesystem
[  670.440044][   T26] audit: type=1326 audit(1586685943.935:102): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13006 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
[  670.466843][   T26] audit: type=1326 audit(1586685943.965:103): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13004 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
[  670.541825][T13029] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000500)
[  670.557729][   T26] audit: type=1326 audit(1586685944.045:104): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13012 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
[  670.701488][T13029] FAT-fs (loop1): Filesystem has been set read-only
[  670.838421][T13029] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000500)
10:05:44 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:05:44 executing program 0:
r0 = io_uring_setup(0x65, &(0x7f0000000040))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001440)=[{0x0}], 0x1)

10:05:44 executing program 1:
r0 = io_uring_setup(0x65, &(0x7f0000000040))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001440)=[{0x0}], 0x1)

[  671.272858][T13046] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500)
[  671.309945][T13044] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000500)
[  671.319472][T13046] FAT-fs (loop2): Filesystem has been set read-only
[  671.338977][T13044] FAT-fs (loop4): Filesystem has been set read-only
10:05:44 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

[  671.366354][T13054] FAT-fs (loop5): bogus number of reserved sectors
[  671.390686][T13054] FAT-fs (loop5): Can't find a valid FAT filesystem
10:05:44 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="00068a7dd8a16795e08348c14dadc3cae622450fbe7dea329b3f475919d59b95e0bfc6b372148ca894a9a1a23e220ad9d3513f2b4f06b405381bf8c7784a744eaf295764d3c9f91d5fe01d83d1347d0000000000000000000000000000000000000000000000000000e5a329208155a5c29a9c62db109533d31bc1e2d34025955e171cfba60ed3b592dd0cf8bba87a338b4ae0357c55ce0eacb7d930f586549418d4447c549b750049619549756f76d6949ceed4fd74c7870c9b35c2df6672edc450cce030618925aa1f31da9d6554900606ae1f4352090a4ce52a92a8e6fb9b6168eab610eec77ba30494bb059a5f2a8c06166611b5ea2eb5cfbe9f6c6ca462deef6e68969102babbf9a5926796beac"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

[  671.497328][   T26] audit: type=1326 audit(1586685944.995:105): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13052 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
[  671.949251][   T26] audit: type=1326 audit(1586685945.405:106): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13075 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
[  672.163413][   T26] audit: type=1326 audit(1586685945.535:107): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13074 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
[  672.285936][T13089] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  672.315804][T13089] FAT-fs (loop2): Filesystem has been set read-only
[  672.337622][T13089] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500)
[  672.361541][T13089] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500)
[  672.392592][T13089] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500)
[  672.587078][T13074] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500)
10:05:54 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000580)}], 0xd, 0xd, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:05:54 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:05:54 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:05:54 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, &(0x7f0000000140), 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:05:54 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

10:05:54 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

10:05:54 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

[  680.865310][   T26] audit: type=1326 audit(1586685954.366:108): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13102 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
[  680.868983][T13113] FAT-fs (loop5): bogus number of reserved sectors
[  680.895601][T13113] FAT-fs (loop5): Can't find a valid FAT filesystem
10:05:54 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

10:05:54 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

10:05:54 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000580)}], 0xd, 0xc, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

[  680.991463][   T26] audit: type=1326 audit(1586685954.446:109): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13105 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:05:54 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {0x0}, {&(0x7f0000000580)}], 0xd, 0xc, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

[  681.092630][   T26] audit: type=1326 audit(1586685954.476:110): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13101 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
[  681.267643][T13128] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0)
10:05:54 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

[  681.405105][T13128] FAT-fs (loop1): Filesystem has been set read-only
[  681.522630][T13128] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000500)
10:05:55 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, &(0x7f0000000140), 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

[  681.633917][T13128] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000500)
[  681.659606][T13142] FAT-fs (loop5): bogus number of reserved sectors
[  681.666541][T13142] FAT-fs (loop5): Can't find a valid FAT filesystem
[  681.682740][   T26] audit: type=1326 audit(1586685955.186:111): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13141 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
[  681.706464][T13128] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000500)
[  681.722695][T13101] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000500)
10:05:56 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:05:56 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000580)}], 0xd, 0xc, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:05:56 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, &(0x7f0000000140), 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="00068a7dd8a16795e08348c14dadc3cae622450fbe7dea329b3f475919d59b95e0bfc6b372148ca894a9a1a23e220ad9d3513f2b4f06b405381bf8c7784a744eaf295764d3c9f91d5fe01d83d1347d0000000000000000000000000000000000000000000000000000e5a329208155a5c29a9c62db109533d31bc1e2d34025955e171cfba60ed3b592dd0cf8bba87a338b4ae0357c55ce0eacb7d930f586549418d4447c549b750049619549756f76d6949ceed4fd74c7870c9b35c2df6672edc450cce030618925aa1f31da9d6554900606ae1f4352090a4ce52a92a8e6fb9b6168eab610eec77ba30494bb059a5f2a8c06166611b5ea2eb5cfbe9f6c6ca462deef6e68969102babbf9a5926796beac"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:05:56 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

10:05:56 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, &(0x7f0000000140), 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

[  682.602683][T13156] FAT-fs (loop1): bogus number of reserved sectors
[  682.617369][T13156] FAT-fs (loop1): Can't find a valid FAT filesystem
10:05:56 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

[  682.709203][T13160] FAT-fs (loop5): bogus number of reserved sectors
10:05:56 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000580)}], 0xd, 0xc, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

[  682.765966][T13160] FAT-fs (loop5): Can't find a valid FAT filesystem
[  682.791916][   T26] audit: type=1326 audit(1586685956.296:112): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13155 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
[  682.852233][   T26] audit: type=1326 audit(1586685956.336:113): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13153 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:05:56 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

10:05:57 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

[  683.625381][   T26] audit: type=1326 audit(1586685956.336:114): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13163 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:06:05 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {0x0}, {&(0x7f0000000580)}], 0xd, 0xc, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:06:05 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000580)}], 0xd, 0xd, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:06:05 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:06:05 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:06:05 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

10:06:05 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

[  692.309960][   T26] audit: type=1326 audit(1586685965.807:115): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13208 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
[  692.339440][T13209] FAT-fs (loop5): bogus number of reserved sectors
10:06:05 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000580)}], 0xd, 0xc, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:06:05 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

[  692.362435][T13209] FAT-fs (loop5): Can't find a valid FAT filesystem
[  692.426870][   T26] audit: type=1326 audit(1586685965.917:116): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13205 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
[  693.196076][T13233] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000500)
[  693.203992][T13233] FAT-fs (loop1): Filesystem has been set read-only
10:06:06 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000580)}], 0xd, 0xc, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:06:06 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="00068a7dd8a16795e08348c14dadc3cae622450fbe7dea329b3f475919d59b95e0bfc6b372148ca894a9a1a23e220ad9d3513f2b4f06b405381bf8c7784a744eaf295764d3c9f91d5fe01d83d1347d0000000000000000000000000000000000000000000000000000e5a329208155a5c29a9c62db109533d31bc1e2d34025955e171cfba60ed3b592dd0cf8bba87a338b4ae0357c55ce0eacb7d930f586549418d4447c549b750049619549756f76d6949ceed4fd74c7870c9b35c2df6672edc450cce030618925aa1f31da9d6554900606ae1f4352090a4ce52a92a8e6fb9b6168eab610eec77ba30494bb059a5f2a8c06166611b5ea2eb5cfbe9f6c6ca462deef6e68969102babbf9a5926796beac"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:06:06 executing program 4:
bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

10:06:06 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

[  693.471869][T13243] FAT-fs (loop5): bogus number of reserved sectors
[  693.526565][T13243] FAT-fs (loop5): Can't find a valid FAT filesystem
[  693.580918][   T26] audit: type=1326 audit(1586685967.087:117): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13241 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
[  693.852608][T13257] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  693.861238][T13257] FAT-fs (loop1): Filesystem has been set read-only
[  693.869259][T13257] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000500)
[  693.878339][T13257] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000500)
[  693.888479][T13257] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000500)
[  694.409284][T13249] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000500)
10:06:15 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {&(0x7f0000000040)}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=0x1}, {0x0, 0x1}, {0x0}, {0x0}, {&(0x7f0000000580)}], 0xd, 0xc, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:06:15 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000580)}], 0xd, 0xc, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:06:15 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:06:15 executing program 4:
bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

10:06:15 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:06:15 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

[  702.406274][T13275] FAT-fs (loop5): bogus number of reserved sectors
[  702.432398][T13275] FAT-fs (loop5): Can't find a valid FAT filesystem
10:06:15 executing program 4:
bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

[  702.447010][   T26] audit: type=1326 audit(1586685975.947:118): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13273 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
[  702.583241][   T26] audit: type=1326 audit(1586685976.027:119): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13272 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:06:16 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:06:16 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:06:16 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="00068a7dd8a16795e08348c14dadc3cae622450fbe7dea329b3f475919d59b95e0bfc6b372148ca894a9a1a23e220ad9d3513f2b4f06b405381bf8c7784a744eaf295764d3c9f91d5fe01d83d1347d0000000000000000000000000000000000000000000000000000e5a329208155a5c29a9c62db109533d31bc1e2d34025955e171cfba60ed3b592dd0cf8bba87a338b4ae0357c55ce0eacb7d930f586549418d4447c549b750049619549756f76d6949ceed4fd74c7870c9b35c2df6672edc450cce030618925aa1f31da9d6554900606ae1f4352090a4ce52a92a8e6fb9b6168eab610eec77ba30494bb059a5f2a8c06166611b5ea2eb5cfbe9f6c6ca462deef6e68969102babbf9a5926796beac"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:06:17 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

[  703.505436][T13286] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  703.590999][T13286] FAT-fs (loop1): Filesystem has been set read-only
[  703.626574][T13286] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000500)
[  703.688898][T13286] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000500)
[  704.778746][   T26] audit: type=1326 audit(1586685977.228:120): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13302 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
[  704.836658][   T26] audit: type=1326 audit(1586685977.298:121): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13303 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:06:18 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

10:06:18 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

[  704.879592][T13306] FAT-fs (loop5): bogus number of reserved sectors
[  704.886464][T13306] FAT-fs (loop5): Can't find a valid FAT filesystem
[  705.180027][   T26] audit: type=1326 audit(1586685978.688:122): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13326 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
[  705.295143][T13333] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  705.304167][T13333] FAT-fs (loop1): Filesystem has been set read-only
[  705.313043][T13333] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000500)
[  705.323421][T13333] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000500)
[  705.333070][T13333] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000500)
[  705.854977][T13326] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000500)
10:06:26 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000580)}], 0xd, 0xd, 0x0, 0x0, 0x0)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

10:06:26 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

10:06:26 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:06:26 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:06:26 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:06:26 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:06:27 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

[  713.541606][   T26] audit: type=1326 audit(1586685987.048:123): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13343 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:06:27 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000580)}], 0xd, 0xd, 0x0, 0x0, 0x0)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

[  713.689221][T13353] FAT-fs (loop5): bogus number of reserved sectors
[  713.715396][T13353] FAT-fs (loop5): Can't find a valid FAT filesystem
10:06:27 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000580)}], 0xd, 0xd, 0x0, 0x0, 0x0)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

[  714.031516][   T26] audit: type=1326 audit(1586685987.258:124): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13345 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:06:28 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:06:28 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="00068a7dd8a16795e08348c14dadc3cae622450fbe7dea329b3f475919d59b95e0bfc6b372148ca894a9a1a23e220ad9d3513f2b4f06b405381bf8c7784a744eaf295764d3c9f91d5fe01d83d1347d0000000000000000000000000000000000000000000000000000e5a329208155a5c29a9c62db109533d31bc1e2d34025955e171cfba60ed3b592dd0cf8bba87a338b4ae0357c55ce0eacb7d930f586549418d4447c549b750049619549756f76d6949ceed4fd74c7870c9b35c2df6672edc450cce030618925aa1f31da9d6554900606ae1f4352090a4ce52a92a8e6fb9b6168eab610eec77ba30494bb059a5f2a8c06166611b5ea2eb5cfbe9f6c6ca462deef6e68969102babbf9a5926796beac"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:06:28 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

[  714.635508][   T26] audit: type=1326 audit(1586685987.458:125): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13346 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:06:28 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000580)}], 0xd, 0xd, 0x0, 0x0, 0x0)
write$sndseq(r0, 0x0, 0x0)

[  714.742703][   T26] audit: type=1326 audit(1586685988.238:126): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13382 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
[  714.766559][T13349] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000500)
10:06:28 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

[  714.788988][T13387] FAT-fs (loop5): bogus number of reserved sectors
[  714.812295][T13349] FAT-fs (loop1): Filesystem has been set read-only
[  714.822006][T13387] FAT-fs (loop5): Can't find a valid FAT filesystem
10:06:28 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

[  714.963071][   T26] audit: type=1326 audit(1586685988.468:127): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13385 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:06:29 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:06:29 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:06:29 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000580)}], 0xd, 0xd, 0x0, 0x0, 0x0)
write$sndseq(r0, 0x0, 0x0)

10:06:29 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:06:29 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

[  715.799500][   T26] audit: type=1326 audit(1586685989.308:128): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13406 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
[  715.832888][T13413] FAT-fs (loop5): bogus number of reserved sectors
[  715.839590][T13413] FAT-fs (loop5): Can't find a valid FAT filesystem
[  715.866584][   T26] audit: type=1326 audit(1586685989.368:129): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13411 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
[  715.909156][T13418] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  715.917818][T13418] FAT-fs (loop1): Filesystem has been set read-only
[  715.926065][T13418] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000500)
[  715.935690][T13418] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000500)
[  715.944802][T13418] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000500)
[  716.108862][   T26] audit: type=1326 audit(1586685989.558:130): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13412 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:06:30 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="00068a7dd8a16795e08348c14dadc3cae622450fbe7dea329b3f475919d59b95e0bfc6b372148ca894a9a1a23e220ad9d3513f2b4f06b405381bf8c7784a744eaf295764d3c9f91d5fe01d83d1347d0000000000000000000000000000000000000000000000000000e5a329208155a5c29a9c62db109533d31bc1e2d34025955e171cfba60ed3b592dd0cf8bba87a338b4ae0357c55ce0eacb7d930f586549418d4447c549b750049619549756f76d6949ceed4fd74c7870c9b35c2df6672edc450cce030618925aa1f31da9d6554900606ae1f4352090a4ce52a92a8e6fb9b6168eab610eec77ba30494bb059a5f2a8c06166611b5ea2eb5cfbe9f6c6ca462deef6e68969102babbf9a5926796beac"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  716.589091][T13406] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000500)
10:06:30 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:06:30 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

[  716.672138][T13421] FAT-fs (loop2): bogus number of reserved sectors
10:06:30 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000580)}], 0xd, 0xd, 0x0, 0x0, 0x0)
write$sndseq(r0, 0x0, 0x0)

10:06:30 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

[  716.714205][T13421] FAT-fs (loop2): Can't find a valid FAT filesystem
[  716.771559][   T26] audit: type=1326 audit(1586685990.159:131): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13419 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:06:30 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000580)}], 0xd, 0xd, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0), 0x0)

10:06:30 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:06:30 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000580)}], 0xd, 0xd, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0), 0x0)

[  716.973398][T13449] FAT-fs (loop5): bogus number of reserved sectors
[  716.980332][T13449] FAT-fs (loop5): Can't find a valid FAT filesystem
10:06:30 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

[  717.029939][   T26] audit: type=1326 audit(1586685990.539:132): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13440 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:06:31 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001a40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000580)}], 0xd, 0xd, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f00000000c0), 0x0)

10:06:31 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:06:31 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

[  717.875012][T13477] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  717.884126][T13477] FAT-fs (loop2): Filesystem has been set read-only
[  717.893512][T13477] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500)
[  717.902016][T13477] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500)
[  717.913626][T13477] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500)
10:06:31 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

10:06:31 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:06:31 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:06:31 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

[  717.947401][T13481] FAT-fs (loop5): bogus number of reserved sectors
[  717.963664][T13481] FAT-fs (loop5): Can't find a valid FAT filesystem
[  717.973399][T13459] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500)
10:06:31 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

10:06:32 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01", 0x11}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="00068a7dd8a16795e08348c14dadc3cae622450fbe7dea329b3f475919d59b95e0bfc6b372148ca894a9a1a23e220ad9d3513f2b4f06b405381bf8c7784a744eaf295764d3c9f91d5fe01d83d1347d0000000000000000000000000000000000000000000000000000e5a329208155a5c29a9c62db109533d31bc1e2d34025955e171cfba60ed3b592dd0cf8bba87a338b4ae0357c55ce0eacb7d930f586549418d4447c549b750049619549756f76d6949ceed4fd74c7870c9b35c2df6672edc450cce030618925aa1f31da9d6554900606ae1f4352090a4ce52a92a8e6fb9b6168eab610eec77ba30494bb059a5f2a8c06166611b5ea2eb5cfbe9f6c6ca462deef6e68969102babbf9a5926796beac"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

[  718.848578][   T26] kauditd_printk_skb: 5 callbacks suppressed
[  718.848591][   T26] audit: type=1326 audit(1586685992.299:138): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13487 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:06:32 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

[  718.959157][T13510] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  718.967858][T13510] FAT-fs (loop3): Filesystem has been set read-only
[  718.975995][T13510] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500)
10:06:32 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

[  719.047611][T13513] FAT-fs (loop5): invalid media value (0x00)
[  719.057708][T13487] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500)
[  719.111308][   T26] audit: type=1326 audit(1586685992.619:139): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13492 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
[  719.134015][T13513] FAT-fs (loop5): Can't find a valid FAT filesystem
10:06:32 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

[  719.889920][   T26] audit: type=1326 audit(1586685992.649:140): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13512 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:06:33 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:06:33 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01", 0x11}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:06:33 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:06:33 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:06:33 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

[  720.070211][   T26] audit: type=1326 audit(1586685992.679:141): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13507 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
[  720.105816][   T26] audit: type=1326 audit(1586685992.769:142): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13521 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
[  720.136696][   T26] audit: type=1326 audit(1586685993.599:143): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13539 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
[  720.228886][T13552] FAT-fs (loop5): invalid media value (0x00)
[  720.239468][T13552] FAT-fs (loop5): Can't find a valid FAT filesystem
10:06:33 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

[  720.291707][   T26] audit: type=1326 audit(1586685993.799:144): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13548 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
[  720.339341][   T26] audit: type=1326 audit(1586685993.839:145): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13536 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:06:34 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:06:35 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

[  721.670339][   T26] audit: type=1326 audit(1586685994.549:146): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13542 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
[  721.694238][   T26] audit: type=1326 audit(1586685994.579:147): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13559 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:06:35 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:06:35 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:06:35 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01", 0x11}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:06:35 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01", 0x11}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="00068a7dd8a16795e08348c14dadc3cae622450fbe7dea329b3f475919d59b95e0bfc6b372148ca894a9a1a23e220ad9d3513f2b4f06b405381bf8c7784a744eaf295764d3c9f91d5fe01d83d1347d0000000000000000000000000000000000000000000000000000e5a329208155a5c29a9c62db109533d31bc1e2d34025955e171cfba60ed3b592dd0cf8bba87a338b4ae0357c55ce0eacb7d930f586549418d4447c549b750049619549756f76d6949ceed4fd74c7870c9b35c2df6672edc450cce030618925aa1f31da9d6554900606ae1f4352090a4ce52a92a8e6fb9b6168eab610eec77ba30494bb059a5f2a8c06166611b5ea2eb5cfbe9f6c6ca462deef6e68969102babbf9a5926796beac"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:06:35 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

10:06:36 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="00068a7dd8a16795e08348c14dadc3cae622450fbe7dea329b3f475919d59b95e0bfc6b372148ca894a9a1a23e220ad9d3513f2b4f06b405381bf8c7784a744eaf295764d3c9f91d5fe01d83d1347d0000000000000000000000000000000000000000000000000000e5a329208155a5c29a9c62db109533d31bc1e2d34025955e171cfba60ed3b592dd0cf8bba87a338b4ae0357c55ce0eacb7d930f586549418d4447c549b750049619549756f76d6949ceed4fd74c7870c9b35c2df6672edc450cce030618925aa1f31da9d6554900606ae1f4352090a4ce52a92a8e6fb9b6168eab610eec77ba30494bb059a5f2a8c06166611b5ea2eb5cfbe9f6c6ca462deef6e68969102babbf9a5926796beac"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  722.762596][T13586] FAT-fs (loop5): invalid media value (0x00)
10:06:36 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="00068a7dd8a16795e08348c14dadc3cae622450fbe7dea329b3f475919d59b95e0bfc6b372148ca894a9a1a23e220ad9d3513f2b4f06b405381bf8c7784a744eaf295764d3c9f91d5fe01d83d1347d0000000000000000000000000000000000000000000000000000e5a329208155a5c29a9c62db109533d31bc1e2d34025955e171cfba60ed3b592dd0cf8bba87a338b4ae0357c55ce0eacb7d930f586549418d4447c549b750049619549756f76d6949ceed4fd74c7870c9b35c2df6672edc450cce030618925aa1f31da9d6554900606ae1f4352090a4ce52a92a8e6fb9b6168eab610eec77ba30494bb059a5f2a8c06166611b5ea2eb5cfbe9f6c6ca462deef6e68969102babbf9a5926796beac"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

[  722.836342][T13586] FAT-fs (loop5): Can't find a valid FAT filesystem
10:06:36 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

[  722.956403][T13607] FAT-fs (loop2): invalid media value (0x00)
[  722.970404][T13607] FAT-fs (loop2): Can't find a valid FAT filesystem
10:06:36 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270", 0x14}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:06:37 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

[  723.928587][T13630] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  723.937233][T13630] FAT-fs (loop3): Filesystem has been set read-only
[  723.948264][T13630] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500)
[  723.957604][T13630] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500)
[  723.967861][T13630] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500)
[  723.978294][   T26] kauditd_printk_skb: 7 callbacks suppressed
[  723.978307][   T26] audit: type=1326 audit(1586685997.459:155): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13631 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:06:37 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

[  724.034468][T13605] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500)
10:06:37 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:06:37 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

[  724.344277][   T26] audit: type=1326 audit(1586685997.849:156): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13636 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
[  724.421301][T13638] FAT-fs (loop5): invalid media value (0x00)
[  724.461375][T13638] FAT-fs (loop5): Can't find a valid FAT filesystem
[  724.684775][   T26] audit: type=1326 audit(1586685998.059:157): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13641 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:06:38 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:06:38 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

[  725.069952][   T26] audit: type=1326 audit(1586685998.579:158): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13659 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
[  725.829263][T13668] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500)
[  725.837130][T13668] FAT-fs (loop3): Filesystem has been set read-only
10:06:39 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270", 0x14}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:06:39 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270", 0x14}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:06:39 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:06:39 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="00068a7dd8a16795e08348c14dadc3cae622450fbe7dea329b3f475919d59b95e0bfc6b372148ca894a9a1a23e220ad9d3513f2b4f06b405381bf8c7784a744eaf295764d3c9f91d5fe01d83d1347d0000000000000000000000000000000000000000000000000000e5a329208155a5c29a9c62db109533d31bc1e2d34025955e171cfba60ed3b592dd0cf8bba87a338b4ae0357c55ce0eacb7d930f586549418d4447c549b750049619549756f76d6949ceed4fd74c7870c9b35c2df6672edc450cce030618925aa1f31da9d6554900606ae1f4352090a4ce52a92a8e6fb9b6168eab610eec77ba30494bb059a5f2a8c06166611b5ea2eb5cfbe9f6c6ca462deef6e68969102babbf9a5926796beac"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:06:39 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:06:39 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

[  725.870010][   T26] audit: type=1326 audit(1586685998.659:159): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13656 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:06:39 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)

[  726.042808][T13678] FAT-fs (loop5): invalid media value (0x00)
[  726.050791][T13678] FAT-fs (loop5): Can't find a valid FAT filesystem
[  726.101671][   T26] audit: type=1326 audit(1586685999.609:160): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13673 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:06:39 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)

[  726.259872][T13689] FAT-fs (loop2): invalid media value (0x00)
[  726.375329][T13689] FAT-fs (loop2): Can't find a valid FAT filesystem
[  726.889081][   T26] audit: type=1326 audit(1586685999.789:161): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13672 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
[  726.912744][   T26] audit: type=1326 audit(1586685999.799:162): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13674 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
[  726.936250][   T26] audit: type=1326 audit(1586685999.799:163): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13683 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:06:40 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:06:40 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270", 0x14}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:06:40 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)

[  727.065951][   T26] audit: type=1326 audit(1586686000.569:164): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13686 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
10:06:40 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270", 0x14}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:06:40 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x55)
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:06:40 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1ff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="00068a7dd8a16795e08348c14dadc3cae622450fbe7dea329b3f475919d59b95e0bfc6b372148ca894a9a1a23e220ad9d3513f2b4f06b405381bf8c7784a744eaf295764d3c9f91d5fe01d83d1347d0000000000000000000000000000000000000000000000000000e5a329208155a5c29a9c62db109533d31bc1e2d34025955e171cfba60ed3b592dd0cf8bba87a338b4ae0357c55ce0eacb7d930f586549418d4447c549b750049619549756f76d6949ceed4fd74c7870c9b35c2df6672edc450cce030618925aa1f31da9d6554900606ae1f4352090a4ce52a92a8e6fb9b6168eab610eec77ba30494bb059a5f2a8c06166611b5ea2eb5cfbe9f6c6ca462deef6e68969102babbf9a5926796beac"], 0x55)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

[  727.324298][T13717] FAT-fs (loop5): invalid media value (0x00)
[  727.357368][T13717] FAT-fs (loop5): Can't find a valid FAT filesystem
10:06:40 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)

10:06:41 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:06:41 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x80000001, 0x4)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  728.215629][T13735] FAT-fs (loop2): invalid media value (0x00)
[  728.309386][T13735] FAT-fs (loop2): Can't find a valid FAT filesystem
[  833.069921][    C0] rcu: INFO: rcu_preempt self-detected stall on CPU
[  833.076955][    C0] rcu: 	0-...!: (10499 ticks this GP) idle=91e/1/0x4000000000000002 softirq=26086/26086 fqs=18 
[  833.087978][    C0] 	(t=10500 jiffies g=39249 q=164)
[  833.093105][    C0] rcu: rcu_preempt kthread starved for 10463 jiffies! g39249 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[  833.104295][    C0] rcu: RCU grace-period kthread stack dump:
[  833.110488][    C0] rcu_preempt     R  running task    29424    10      2 0x80004000
[  833.118561][    C0] Call Trace:
[  833.121995][    C0]  ? __schedule+0x937/0x1ff0
[  833.126602][    C0]  ? __sched_text_start+0x8/0x8
[  833.131517][    C0]  ? _raw_spin_lock_irqsave+0x94/0xbf
[  833.137087][    C0]  ? debug_smp_processor_id+0x2f/0x185
[  833.142568][    C0]  schedule+0xd0/0x2a0
[  833.146649][    C0]  schedule_timeout+0x35c/0x850
[  833.151509][    C0]  ? usleep_range+0x160/0x160
[  833.156291][    C0]  ? rcu_implicit_dynticks_qs+0x73/0xac0
[  833.161934][    C0]  ? _raw_spin_unlock_irqrestore+0x62/0xe0
[  833.167905][    C0]  ? __next_timer_interrupt+0x190/0x190
[  833.173535][    C0]  ? prepare_to_swait_exclusive+0x110/0x110
[  833.179443][    C0]  rcu_gp_kthread+0x9bf/0x1960
[  833.184229][    C0]  ? rcu_barrier+0x4b0/0x4b0
[  833.188831][    C0]  ? _raw_spin_unlock_irqrestore+0x62/0xe0
[  833.194709][    C0]  ? lockdep_hardirqs_on+0x463/0x620
[  833.200071][    C0]  ? __kthread_parkme+0x13f/0x1e0
[  833.205105][    C0]  ? rcu_barrier+0x4b0/0x4b0
[  833.209705][    C0]  kthread+0x388/0x470
[  833.213781][    C0]  ? kthread_mod_delayed_work+0x1a0/0x1a0
[  833.219567][    C0]  ret_from_fork+0x24/0x30
[  833.224004][    C0] NMI backtrace for cpu 0
[  833.228336][    C0] CPU: 0 PID: 13730 Comm: syz-executor.5 Not tainted 5.6.0-syzkaller #0
[  833.236788][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  833.246871][    C0] Call Trace:
[  833.250158][    C0]  <IRQ>
[  833.253093][    C0]  dump_stack+0x188/0x20d
[  833.257484][    C0]  nmi_cpu_backtrace.cold+0x70/0xb1
[  833.262771][    C0]  ? lapic_can_unplug_cpu.cold+0x3b/0x3b
[  833.268413][    C0]  nmi_trigger_cpumask_backtrace+0x231/0x27e
[  833.274406][    C0]  rcu_dump_cpu_stacks+0x19b/0x1e5
[  833.279532][    C0]  rcu_sched_clock_irq.cold+0x55d/0xcfa
[  833.285121][    C0]  ? trace_hardirqs_off+0x50/0x220
[  833.290306][    C0]  update_process_times+0x25/0x60
[  833.295446][    C0]  tick_sched_handle+0x9b/0x180
[  833.300331][    C0]  tick_sched_timer+0x4e/0x140
[  833.305155][    C0]  __hrtimer_run_queues+0x5ca/0xed0
[  833.310359][    C0]  ? tick_sched_do_timer+0x1a0/0x1a0
[  833.315666][    C0]  ? do_raw_spin_lock+0x129/0x2e0
[  833.320832][    C0]  ? hrtimer_init+0x320/0x320
[  833.325728][    C0]  ? ktime_get_update_offsets_now+0x2d6/0x450
[  833.331812][    C0]  hrtimer_interrupt+0x312/0x770
[  833.336778][    C0]  smp_apic_timer_interrupt+0x15b/0x600
[  833.342346][    C0]  apic_timer_interrupt+0xf/0x20
[  833.347380][    C0]  </IRQ>
[  833.350399][    C0] RIP: 0010:kfree+0x1fe/0x2b0
[  833.355089][    C0] Code: 75 6b 48 83 3d d2 0d e4 07 00 0f 85 4e ff ff ff 0f 0b e8 85 1a c8 ff 48 83 3d bd 0d e4 07 00 0f 84 b3 00 00 00 48 89 df 57 9d <0f> 1f 44 00 00 5b 5d 41 5c 41 5d c3 65 ff 05 47 94 51 7e 48 8b 05
[  833.374761][    C0] RSP: 0018:ffffc90016f07958 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13
[  833.383186][    C0] RAX: 0000000000000007 RBX: 0000000000000286 RCX: 1ffffffff1862c98
[  833.391164][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000286
[  833.399839][    C0] RBP: ffff88803bd90e00 R08: 0000000000000001 R09: fffffbfff185c74e
[  833.407819][    C0] R10: ffffffff8c2e3a6f R11: fffffbfff185c74d R12: ffff8880aa0008c0
[  833.415798][    C0] R13: ffffffff81c8b692 R14: 0000000000000000 R15: ffff8880858b0168
[  833.423983][    C0]  ? iter_file_splice_write+0x592/0xb00
[  833.429646][    C0]  iter_file_splice_write+0x592/0xb00
[  833.435044][    C0]  ? page_cache_pipe_buf_release+0x280/0x280
[  833.441272][    C0]  ? selinux_file_permission+0x92/0x560
[  833.446843][    C0]  ? page_cache_pipe_buf_release+0x280/0x280
[  833.452842][    C0]  direct_splice_actor+0x115/0x160
[  833.458051][    C0]  splice_direct_to_actor+0x38c/0x980
[  833.463438][    C0]  ? generic_pipe_buf_nosteal+0x10/0x10
[  833.468994][    C0]  ? do_splice_to+0x160/0x160
[  833.473807][    C0]  do_splice_direct+0x1b4/0x280
[  833.479021][    C0]  ? splice_direct_to_actor+0x980/0x980
[  833.484907][    C0]  ? preempt_count_add+0x74/0x140
[  833.490123][    C0]  ? __this_cpu_preempt_check+0x28/0x190
[  833.495937][    C0]  do_sendfile+0x555/0xc50
[  833.500401][    C0]  ? do_compat_pwritev64+0x1b0/0x1b0
[  833.505764][    C0]  ? __might_fault+0x190/0x1d0
[  833.510591][    C0]  __x64_sys_sendfile64+0x149/0x210
[  833.515805][    C0]  ? __ia32_sys_sendfile+0x220/0x220
[  833.521397][    C0]  ? do_syscall_64+0x4f/0x7d0
[  833.526091][    C0]  do_syscall_64+0xf6/0x7d0
[  833.530610][    C0]  entry_SYSCALL_64_after_hwframe+0x49/0xb3
[  833.536512][    C0] RIP: 0033:0x45c889
[  833.540529][    C0] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  833.560145][    C0] RSP: 002b:00007f4d4a080c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  833.568577][    C0] RAX: ffffffffffffffda RBX: 00007f4d4a0816d4 RCX: 000000000045c889
[  833.576556][    C0] RDX: 00000000200001c0 RSI: 0000000000000006 RDI: 0000000000000006
[  833.586143][    C0] RBP: 000000000076c0e0 R08: 0000000000000000 R09: 0000000000000000
[  833.594291][    C0] R10: 00008080fffffffe R11: 0000000000000246 R12: 00000000ffffffff
[  833.602286][    C0] R13: 00000000000008d4 R14: 00000000004cb7c6 R15: 000000000076c0ec